This vulnerability (CVE-2026-32081) involves the exposure of sensitive information to an unauthorized actor through Windows File Explorer in Microsoft Windows 10 Version 1607 (build 10.0.14393.0). The attacker must have local authorized access (low privileges) to exploit this issue, which does not require user interaction. The vulnerability is classified under CWE-200 (Exposure of Sensitive Information). The CVSS 3.1 base score is 5.5, reflecting medium severity, with high confidentiality impact but no impact on integrity or availability. Microsoft has released an official fix for this vulnerability.

An authorized local attacker with low privileges can disclose sensitive information from the affected Windows 10 Version 1607 system. The confidentiality of data is impacted, but integrity and availability remain unaffected. There are no known exploits in the wild at this time.

An official fix is available from Microsoft. Users and administrators should apply the security update provided in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32081 to remediate this vulnerability.