CVE-2026-88191: CWE-59: Improper Link Resolution Before File Access ('Link Following') in Microsoft Windows 10 Version 1607

CVE-2026-88191 is a vulnerability categorized under CWE-59 (Improper Link Resolution Before File Access, also known as 'Link Following') affecting Microsoft Windows 10 Version 1607 and several other Windows 10 builds. It involves the Windows Search Component improperly resolving symbolic links or similar link types before accessing files, which can be exploited by an authorized local attacker to gain elevated privileges. The vulnerability has a CVSS v3.1 base score of 7.8, indicating high severity. Microsoft has issued an official fix for this vulnerability, as documented in their security update guide.

An authorized local attacker can exploit this vulnerability to elevate privileges on affected Windows 10 systems. This could allow the attacker to gain higher-level permissions than intended, potentially leading to full system compromise. The vulnerability affects confidentiality, integrity, and availability, all rated high impact in the CVSS vector.

Microsoft has released official security updates that address this vulnerability. Users and administrators should apply the provided patches promptly to remediate the issue. Since an official fix is available, no additional mitigation steps are required beyond applying the update.