Windows Credential Providers Elevation of Privilege Vulnerability

Summary

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Credential Providers allows an authorized attacker to elevate privileges locally.

Remediation

1. Inventory every Microsoft Windows 10 Version 1607 deployment, including staging.
2. Upgrade Microsoft Windows 10 Version 1607 to the fixed version for your release line, listed under Affected versions.
3. Confirm the running version after the upgrade.

References

• Patchhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-103568