CVE-2026-97807: CWE-416: Use After Free in Microsoft Windows 10 Version 1809

This vulnerability (CVE-2026-97807) involves a use-after-free condition in the Windows Broadcast DVR User Service on Windows 10 Version 1809 and several subsequent builds. Exploitation requires local access with some privileges and can lead to elevation of privileges, compromising confidentiality, integrity, and availability. The CVSS 3.1 vector indicates low attack complexity, low privileges required, no user interaction, and a complete impact on confidentiality, integrity, and availability. Microsoft has released official fixes for affected versions.

Successful exploitation allows an authorized local attacker to elevate privileges on the affected Windows 10 systems, potentially gaining higher-level access and control. The impact includes full compromise of confidentiality, integrity, and availability of the system as indicated by the CVSS vector.

An official fix is available from Microsoft. Users and administrators should apply the security updates provided by Microsoft for the affected Windows 10 versions as detailed in the Microsoft security advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97807. No additional mitigation steps are indicated beyond applying the official patch.