This vulnerability (CVE-2026-25168) is a null pointer dereference (CWE-476) in the Microsoft Graphics Component of Windows 10 Version 1607 (build 10.0.14393.0). It allows an unauthorized attacker with local access to cause a denial of service (system crash or instability) by exploiting the null pointer dereference. The CVSS 3.1 base score is 6.2, reflecting medium severity with local attack vector, low attack complexity, no privileges required, and no user interaction needed. The vulnerability impacts system availability only and does not affect confidentiality or integrity. A patch is available from Microsoft to remediate this issue.

An attacker with local access can exploit this vulnerability to cause a denial of service condition on affected Windows 10 Version 1607 systems by triggering a null pointer dereference in the graphics component. This results in system instability or crash, impacting availability. There is no impact on confidentiality or integrity. No known exploits are reported in the wild at this time.

A patch is available to remediate this vulnerability. It is recommended to apply the official Microsoft update for Windows 10 Version 1607 to address this issue. Since this is a local denial of service vulnerability, applying the patch will prevent exploitation. No additional mitigations are specified.