Windows IKE Extension Spoofing Vulnerability

According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?
Successful exploitation requires connection-security policies that apply to the target service and an existing authenticated connection established by a desktop application for the same user. The attacker cannot establish that authenticated desktop connection solely by exploiting this vulnerability.

According to the CVSS metric, successful exploitation could lead to a scope change (S:C). What does this mean for this vulnerability?
Successful exploitation could allow an application running in an AppContainer to use the desktop user's authenticated network identity outside that sandbox. This does not by itself grant code execution or bypass additional authorization required by the target service.

Security updates
10.0.14393.9688 — https://support.microsoft.com/help/5131291
10.0.17763.9487 — https://support.microsoft.com/help/5131085
10.0.19044.7846 — https://support.microsoft.com/help/5131096
10.0.20348.5870 — https://support.microsoft.com/help/5131090
10.0.22631.7711 — https://support.microsoft.com/help/5131087
10.0.26100.9974 — https://support.microsoft.com/help/5132061
10.0.26100.9911 — https://support.microsoft.com/help/5132043
10.0.26100.33822 — https://support.microsoft.com/help/5131080
10.0.26100.33730 — https://support.microsoft.com/help/5131077
10.0.28000.3501 — https://support.microsoft.com/help/5132059