This vulnerability involves a heap-based buffer overflow in the Windows Telephony Service component of Microsoft Windows 10 Version 1607 (build 10.0.14393.0). An attacker with local authorized access can exploit this flaw to elevate their privileges on the system. The CVSS v3.1 base score is 7.8, reflecting high impact on confidentiality, integrity, and availability. Microsoft has published an official fix for this vulnerability, as documented in their security update guide.

Successful exploitation of this vulnerability allows an authorized local attacker to gain elevated privileges, potentially leading to full control over the affected system. The impact includes high confidentiality, integrity, and availability consequences as per the CVSS vector.

An official fix is available from Microsoft. Users and administrators should apply the security update provided by Microsoft for Windows 10 Version 1607 to remediate this vulnerability. Refer to the Microsoft security update guide at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-61353 for detailed patch information and deployment instructions.