This vulnerability (CVE-2026-26169) involves a buffer over-read condition in the Windows Kernel Memory on Windows 10 Version 1607 (build 10.0.14393.0). An attacker with local authorized access can exploit this flaw to read memory beyond the intended buffer boundaries, potentially disclosing sensitive information. The vulnerability has been assigned a CVSS v3.1 base score of 6.1, indicating a medium severity impact primarily affecting confidentiality. Microsoft has released an official patch to remediate this issue, as detailed in their security advisory.

An authorized local attacker could leverage this buffer over-read vulnerability to disclose sensitive information from kernel memory. The impact is limited to confidentiality, with no integrity or availability effects reported. There are no known active exploits targeting this vulnerability currently.

Microsoft has provided an official fix for this vulnerability. Users and administrators should apply the security update available from the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26169 to remediate this issue. No additional mitigation steps are indicated by the vendor.