CVE-2026-70562: CWE-415: Double Free in Microsoft Windows 10 Version 1607

This vulnerability, identified as CWE-415 (Double Free), exists in the Windows Audio Service component of Microsoft Windows 10 Version 1607 and related builds. The flaw allows a local attacker with authorized access to cause a double free condition, potentially leading to privilege escalation. The CVSS 3.1 base score is 7.0, indicating high severity, with attack vector local, high attack complexity, low privileges required, and no user interaction. Confidentiality, integrity, and availability impacts are all rated high. Microsoft has published an official fix for this vulnerability.

An authorized local attacker can exploit this double free vulnerability to elevate their privileges on the affected Windows 10 systems. This could allow the attacker to gain higher-level access than intended, potentially compromising system security and control.

An official fix is available from Microsoft. Users and administrators should apply the security updates provided by Microsoft for the affected Windows 10 versions as detailed in the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70562. No additional mitigation steps are indicated by the vendor advisory.