This vulnerability involves a numeric truncation error (CWE-197) in the Windows DNS implementation in Windows 10 Version 1607 (build 10.0.14393.0). An authorized local attacker can exploit this flaw to elevate privileges, potentially gaining higher system rights. The vulnerability has been assigned CVE-2026-62881 and has a CVSS 3.1 base score of 6.7, indicating a medium severity. Microsoft has published an official fix to remediate this issue, as detailed in their security update guide.

An authorized local attacker can leverage this numeric truncation error to elevate privileges on the affected Windows 10 Version 1607 system. This could lead to full system compromise depending on the privileges gained. The vulnerability affects confidentiality, integrity, and availability (all rated high impact in the CVSS vector). There are no known exploits in the wild at this time.

An official fix is available from Microsoft for this vulnerability. Users and administrators should apply the security update provided by Microsoft for Windows 10 Version 1607 as soon as possible to remediate this issue. Refer to the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62881 for detailed patch information and update instructions.