This vulnerability is a use-after-free condition (CWE-416) in the Windows Telephony Service component of Microsoft Windows 10 Version 1607 (build 10.0.14393.0). An authorized attacker with local access can exploit this flaw to elevate their privileges on the affected system. The CVSS v3.1 base score is 7.0, indicating high severity, with attack vector local, high attack complexity, low privileges required, no user interaction, unchanged scope, and high impact on confidentiality, integrity, and availability. Microsoft has released an official fix for this vulnerability as documented in their security update guide.

Successful exploitation allows an authorized local attacker to elevate their privileges, potentially gaining higher-level access than intended. This could lead to full system compromise or unauthorized actions that require elevated permissions. There are no known exploits in the wild at this time.

Microsoft has released an official fix for this vulnerability. Users and administrators should apply the security update provided by Microsoft for Windows 10 Version 1607 (build 10.0.14393.0) to remediate this issue. No additional mitigation steps are indicated by the vendor advisory.