This vulnerability (CVE-2026-50685) is a double free condition in the Windows DHCP Server on Windows 10 Version 1607 (build 10.0.14393.0). The flaw allows an attacker with some level of authorization to execute arbitrary code remotely by exploiting the improper memory management. The CVSS 3.1 base score is 7.5, indicating high severity, with network attack vector, high impact on confidentiality, integrity, and availability, and requiring low privileges but high attack complexity. Microsoft has released an official fix for this vulnerability as documented in their security update guide.

Successful exploitation of this vulnerability could allow an authorized attacker to execute arbitrary code remotely on the affected system, potentially leading to full system compromise including confidentiality, integrity, and availability impacts. No known exploits in the wild have been reported at this time.

An official fix is available from Microsoft. It is recommended to apply the security update provided by Microsoft for Windows 10 Version 1607 to remediate this vulnerability. Refer to the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50685 for the patch and update instructions.