This vulnerability (CVE-2026-32079) affects Windows 10 Version 1607 (build 10.0.14393.0) and is classified as CWE-200, indicating exposure of sensitive information to unauthorized actors. The flaw exists in Windows File Explorer and allows a local attacker with some level of authorization (low privileges) to disclose sensitive information without user interaction. The CVSS 3.1 base score is 5.5 (medium), reflecting local attack vector, low complexity, low privileges required, no user interaction, and high confidentiality impact. Microsoft has published an official fix for this vulnerability as detailed in their security update guide.

An attacker with local access and low privileges can exploit this vulnerability to disclose sensitive information from Windows File Explorer without requiring user interaction. The confidentiality of information is impacted, but integrity and availability are not affected. There are no known exploits in the wild at this time.

An official fix is available from Microsoft. Users and administrators should apply the security update provided by Microsoft for Windows 10 Version 1607 (build 10.0.14393.0) as detailed in the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32079. Applying this patch will remediate the vulnerability.