This vulnerability involves a buffer over-read in the Windows Kernel Memory on Windows 10 Version 1607 (build 10.0.14393.0). An authorized attacker with local access can exploit this flaw to read memory beyond the intended buffer boundaries, potentially disclosing sensitive information. The vulnerability is tracked as CWE-126 and has been assigned CVE-2026-26169. Microsoft has published an official fix to remediate this issue.

An authorized local attacker can exploit this vulnerability to disclose sensitive information from kernel memory. The integrity and availability of the system are not impacted. There are no known exploits in the wild at this time.

An official fix is available from Microsoft. Users and administrators should apply the security update provided by Microsoft for Windows 10 Version 1607 (build 10.0.14393.0) as detailed in the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26169.