This vulnerability (CVE-2026-65789) involves a use-after-free condition in the Windows DNS service on Windows 10 Version 1607 (build 10.0.14393.0). Exploitation could allow an attacker to execute arbitrary code remotely without requiring user interaction, leveraging network access. The vulnerability is confirmed and publicly disclosed with a high CVSS 3.1 score of 8.1, reflecting high impact on confidentiality, integrity, and availability. Microsoft has issued an official fix to remediate this security flaw.

Successful exploitation of this vulnerability could lead to remote code execution by an unauthorized attacker, potentially allowing full control over the affected system. The impact includes complete compromise of confidentiality, integrity, and availability of the system running the vulnerable Windows 10 Version 1607.

An official fix is available from Microsoft. Users and administrators should apply the security update provided in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65789 to remediate this vulnerability.