This vulnerability involves a concurrent execution issue using a shared resource with improper synchronization (CWE-362) in the Windows Telephony Service on Windows 10 Version 1607 (build 10.0.14393.0). An authorized local attacker can exploit this race condition to elevate privileges on the affected system. The CVSS 3.1 base score is 7.0, indicating high severity, with attack vector local, high attack complexity, and requiring low privileges but no user interaction. Microsoft has published an official fix for this vulnerability.

An authorized local attacker can exploit this race condition to gain elevated privileges, potentially allowing them to execute code with higher permissions, compromise system integrity, and affect confidentiality and availability. The CVSS vector indicates high impact on confidentiality, integrity, and availability.

An official fix is available from Microsoft. Users and administrators should apply the security update provided in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62729 to remediate this vulnerability.