CVE-2026-26155 is a buffer over-read vulnerability (CWE-126) affecting Microsoft Windows 10 Version 1607 (build 10.0.14393.0). It involves the Local Security Authority Subsystem Service and can result in information disclosure. The vulnerability has a CVSS 3.1 base score of 6.5, indicating a medium severity level. The attack vector is network-based with low attack complexity and requires low privileges but no user interaction. Microsoft has released an official fix for this vulnerability as documented in their security update guide.

Successful exploitation of this vulnerability could allow an attacker with low privileges to remotely cause information disclosure from the Local Security Authority Subsystem Service on affected Windows 10 Version 1607 systems. There is no impact on integrity or availability. No known exploits are reported in the wild at this time.

An official fix is available from Microsoft. Users and administrators should apply the security update provided by Microsoft for Windows 10 Version 1607 to remediate this vulnerability. Refer to the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26155 for the update details and installation instructions.