This vulnerability involves an out-of-bounds read (CWE-125) in the Windows NDIS component on Windows 10 Version 1607 (build 10.0.14393.0). An attacker with authorized access and physical proximity can exploit this flaw to read memory beyond intended boundaries, potentially disclosing sensitive information. The vulnerability does not allow for privilege escalation, denial of service, or remote exploitation without physical access. The CVSS vector indicates low attack complexity, low privileges required, no user interaction, and a confidentiality impact classified as high. The vendor has released a patch to remediate this vulnerability.

An authorized attacker with physical access to a vulnerable Windows 10 Version 1607 system can exploit this out-of-bounds read to disclose sensitive information from memory. There is no indication of impact on system integrity or availability. No known exploits are reported in the wild at this time.

A patch is available from Microsoft to address this vulnerability. It is recommended to apply the official security update for Windows 10 Version 1607 as soon as possible to mitigate the risk of information disclosure. No additional mitigation steps are indicated by the vendor advisory.