This vulnerability (CVE-2026-33829) affects Windows 10 Version 1607 (build 10.0.14393.0) and is classified under CWE-200, indicating exposure of sensitive information to unauthorized actors. Specifically, the Windows Snipping Tool component can leak sensitive data, which an attacker could leverage to perform spoofing attacks remotely over a network. The CVSS v3.1 base score is 4.3 (medium severity), reflecting network attack vector, low complexity, no privileges required, user interaction needed, and impact limited to confidentiality. Microsoft has issued an official fix for this vulnerability.

The vulnerability allows unauthorized actors to gain access to sensitive information through the Windows Snipping Tool, which could facilitate spoofing attacks. The impact is limited to confidentiality loss without affecting integrity or availability. No known exploits are reported in the wild at this time.

An official fix is available from Microsoft. Users and administrators should apply the security update provided in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33829 to remediate this vulnerability.