This vulnerability (CVE-2026-62770) involves a heap-based buffer overflow in the Windows Shell on Windows 10 Version 1607 (build 10.0.14393.0). An attacker with local authorized access can exploit this flaw to elevate their privileges. The vulnerability has been assigned a CVSS 3.1 base score of 7.8, indicating high severity, with impacts to confidentiality, integrity, and availability. Microsoft has released an official fix to remediate this vulnerability, as documented in their security update guide.

Successful exploitation of this vulnerability could allow a local authorized attacker to gain elevated privileges, potentially leading to full system compromise. The CVSS vector indicates low attack complexity and low privileges required, with no user interaction needed, making it a significant local privilege escalation risk.

An official fix is available from Microsoft. It is recommended to apply the security update provided by Microsoft for Windows 10 Version 1607 (build 10.0.14393.0) as soon as possible to remediate this vulnerability. Refer to the Microsoft security update guide at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62770 for details and patch deployment instructions.