This vulnerability, identified as CWE-908 (Use of Uninitialized Resource), affects Windows 10 Version 1607 (build 10.0.14393.0). It allows an attacker with low privileges and network access to cause a confidentiality breach by exploiting uninitialized resources in the Windows networking stack. The CVSS v3.1 base score is 7.7, indicating high severity. Microsoft has released an official fix for this issue as documented in their security update guide.

Successful exploitation can lead to a complete loss of confidentiality (information disclosure) without impacting integrity or availability. The attacker requires network access and low privileges, and no user interaction is needed. The vulnerability affects the confidentiality of sensitive networking information on the affected system.

An official fix is available from Microsoft. Users and administrators should apply the security update provided by Microsoft for Windows 10 Version 1607 (build 10.0.14393.0) as detailed in the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43458. No additional mitigations are required beyond applying the official patch.