This vulnerability (CVE-2026-21222) involves the insertion of sensitive information into log files by the Windows Kernel in Windows 10 Version 1607 (build 10.0.14393.0). An authorized attacker with local access can exploit this to disclose sensitive information. The vulnerability is classified under CWE-532 (Insertion of Sensitive Information into Log File). The CVSS 3.1 base score is 5.5, reflecting local attack vector, low attack complexity, required privileges, no user interaction, unchanged scope, high confidentiality impact, and no integrity or availability impact. Microsoft has issued an official fix for this vulnerability.

The impact of this vulnerability is the potential disclosure of sensitive information to an authorized local attacker through log files. There is no impact on system integrity or availability. The confidentiality impact is rated high, meaning sensitive data could be exposed if exploited. No known exploits are reported in the wild at this time.

An official fix is available from Microsoft to remediate this vulnerability. Users and administrators should apply the security update provided by Microsoft as detailed in the vendor advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21222. Since this is a local information disclosure vulnerability, applying the patch will mitigate the risk effectively.