This vulnerability (CVE-2026-58629) involves a use-after-free condition in the Windows DirectX component on Windows 10 Version 1607 (build 10.0.14393.0). An attacker with local access and limited privileges can exploit this flaw to elevate their privileges on the affected system. The vulnerability has a CVSS 3.1 base score of 7.0, indicating high severity, with attack vector local, high attack complexity, and no user interaction required. Microsoft has released an official fix for this issue as documented in their security update guide.

Successful exploitation allows a local attacker with limited privileges to elevate their privileges, potentially gaining higher-level access to the system. This can lead to full system compromise, including confidentiality, integrity, and availability impacts as indicated by the CVSS metrics.

An official fix is available from Microsoft. Users and administrators should apply the security update provided by Microsoft for Windows 10 Version 1607 (build 10.0.14393.0) as soon as possible to remediate this vulnerability. Refer to the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58629 for update details and installation instructions.