This vulnerability involves an out-of-bounds read in the Windows GDI component, which can be exploited by an unauthorized local attacker to disclose information. It affects Microsoft Windows 10 Version 1607, specifically version 10.0.14393.0. The vulnerability is tracked as CWE-125 and has a CVSS 3.1 base score of 5.5, indicating medium severity. Microsoft has released an official fix to remediate this issue.

An unauthorized attacker with local access can exploit this vulnerability to read memory outside the intended bounds, potentially disclosing sensitive information. There is no impact on integrity or availability, and no known exploits are reported in the wild.

An official fix is available from Microsoft. Users and administrators should apply the security update provided by Microsoft for Windows 10 Version 1607 to remediate this vulnerability. Refer to the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-27930 for detailed patch information and installation instructions.