This vulnerability, identified as CVE-2026-54132 and classified under CWE-122 (Heap-based Buffer Overflow), affects Microsoft Windows 10 Version 1607 (build 10.0.14393.0). It exists in the Windows Kernel and can be exploited by an attacker with physical access to the device to elevate privileges. The CVSS 3.1 vector indicates the attack requires physical access (AV:P), low attack complexity (AC:L), no privileges required (PR:N), no user interaction (UI:N), and results in high impact on confidentiality, integrity, and availability (C:H/I:H/A:H). Microsoft has released an official fix for this vulnerability.

Successful exploitation of this vulnerability allows an attacker with physical access to the affected system to gain elevated privileges, potentially leading to full control over the system. The impact includes complete compromise of confidentiality, integrity, and availability of the affected system.

An official fix is available from Microsoft. Users and administrators should apply the security update provided by Microsoft for Windows 10 Version 1607 (build 10.0.14393.0) as detailed in the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54132. Applying this patch mitigates the vulnerability.