This vulnerability, identified as CVE-2026-65790 and classified under CWE-122 (Heap-based Buffer Overflow), affects Microsoft Windows 10 Version 1607 (build 10.0.14393.0). It occurs in the Windows Message Queuing component and allows an attacker with local authorized access to execute a heap-based buffer overflow, resulting in privilege escalation. The CVSS v3.1 score is 7.8, indicating high impact on confidentiality, integrity, and availability. Microsoft has released an official fix for this vulnerability as documented in their security update guide.

An authorized local attacker can exploit this heap-based buffer overflow to elevate privileges on the affected system. This could lead to full system compromise, including unauthorized access to sensitive information and the ability to execute arbitrary code with elevated rights.

Microsoft has released an official fix for this vulnerability. Users and administrators should apply the security update provided by Microsoft as detailed in the vendor advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65790. No additional mitigation steps are required beyond applying the official patch.