CVE-2026-97789: CWE-416: Use After Free in Microsoft Windows 10 Version 1607

This vulnerability, tracked as CVE-2026-97789, involves a use-after-free condition in the Remote Desktop Client on Microsoft Windows 10 Version 1607 and other specified builds. Exploitation could allow an attacker to execute arbitrary code remotely without privileges, although user interaction is required. The CVSS 3.1 vector indicates network attack vector, high attack complexity, no privileges required, user interaction required, unchanged scope, and high impact on confidentiality, integrity, and availability. Microsoft has published an official fix for this vulnerability.

Successful exploitation of this use-after-free vulnerability can lead to remote code execution by an unauthorized attacker over a network. This could result in full compromise of affected systems, including complete control over confidentiality, integrity, and availability of the system.

An official fix is available from Microsoft. Users and administrators should apply the security updates provided in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97789 to remediate this vulnerability. No additional mitigation steps are indicated beyond applying the official patch.