This vulnerability is a double free condition in the Microsoft Graphics Component of Windows 10 Version 1607 (build 10.0.14393.0). The flaw enables remote code execution by an attacker without any privileges or user interaction. The CVSS v3.1 base score is 9.8, indicating critical severity with network attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. Microsoft has published an official fix to address this issue.

Successful exploitation allows an attacker to execute arbitrary code remotely on affected systems, potentially leading to full system compromise. The vulnerability affects confidentiality, integrity, and availability of the system. No known exploits in the wild have been reported at this time.

An official fix is available from Microsoft. Users and administrators should apply the security update provided in the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77493 to remediate this vulnerability.