This vulnerability involves a use-after-free condition in the Windows UPnP Device Host, which can be exploited by an attacker on an adjacent network to disclose sensitive information without requiring user interaction or privileges. The vulnerability affects Windows 10 Version 1607, specifically build 10.0.14393.0. Microsoft has released an official fix for this vulnerability as documented in their security update guide.

An attacker on an adjacent network can exploit this use-after-free vulnerability to disclose information from the affected system. The vulnerability does not allow privilege escalation, denial of service, or integrity compromise, but the confidentiality impact is high. There are no known exploits in the wild at this time.

An official fix is available from Microsoft. Users and administrators should apply the security update provided by Microsoft for Windows 10 Version 1607 to remediate this vulnerability. No additional mitigation steps are required beyond applying the official patch.