This vulnerability involves external control of file name or path in the Windows NTLM authentication protocol on Windows 10 Version 1607 (build 10.0.14393.0). It allows an unauthorized attacker to perform spoofing attacks over a network by manipulating file names or paths. The CVSS 3.1 vector indicates the attack can be performed remotely with low complexity and no privileges required, but user interaction is needed. The impact is high confidentiality loss without integrity or availability impact. Microsoft has published an official fix for this vulnerability.

An attacker can exploit this vulnerability to spoof network communications, potentially leading to unauthorized access to sensitive information. The confidentiality impact is high, but there is no direct impact on integrity or availability. No known exploits are currently reported in the wild.

An official fix is available from Microsoft. Users and administrators should apply the security update provided in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20925 to remediate this vulnerability.