This vulnerability involves a protection mechanism failure categorized under CWE-693 in the Windows Shell component of Microsoft Windows 10 Version 1607 (build 10.0.14393.0). It allows an attacker without privileges to potentially spoof network communications, which could mislead users or systems. The CVSS 3.1 vector indicates the attack can be performed remotely over the network with low complexity and no privileges required, but user interaction is needed. The impact is limited to confidentiality with no integrity or availability impact. Microsoft has released an official fix for this vulnerability.

An attacker could exploit this vulnerability to perform spoofing attacks over a network, potentially misleading users or systems by presenting false information. The impact is limited to a confidentiality loss; there is no impact on integrity or availability. No known exploits are currently reported in the wild.

Microsoft has released an official fix for this vulnerability. It is recommended to apply the security update provided by Microsoft as detailed in their advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32202. Since this is not a cloud service, remediation depends on patching affected Windows 10 Version 1607 systems.