This vulnerability, identified as CWE-126 (Buffer Over-read), affects Microsoft Windows 10 Version 1607 (build 10.0.14393.0) in the Local Security Authority Subsystem Service. It allows an attacker with low privileges and no user interaction to cause information disclosure by reading beyond the intended buffer boundaries. The vulnerability has been assigned CVE-2026-26155 and has a CVSS v3.1 base score of 6.5, indicating medium severity. Microsoft has published an official fix to address this issue.

Successful exploitation of this vulnerability could allow an attacker with low privileges to disclose sensitive information from the affected system. There is no impact on integrity or availability. No known exploits are reported in the wild at this time.

An official fix is available from Microsoft. Users and administrators should apply the provided security update for Windows 10 Version 1607 (build 10.0.14393.0) as detailed in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26155 to remediate this vulnerability.