This vulnerability (CVE-2026-34339) is a null pointer dereference issue in the Lightweight Directory Access Protocol (LDAP) implementation on Microsoft Windows 10 Version 1607 (build 10.0.14393.0). An authorized attacker with local access can exploit this flaw to cause a denial of service condition, resulting in system instability or crash. The CVSS v3.1 base score is 5.5 (medium severity) with attack vector local, low complexity, low privileges required, no user interaction, and impact limited to availability. Microsoft has published an official fix to address this issue.

The vulnerability allows an authorized local attacker to cause a denial of service by triggering a null pointer dereference in the Windows LDAP service. There is no impact on confidentiality or integrity. The availability of the affected system can be disrupted, potentially causing system crashes or service interruptions.

An official fix is available from Microsoft. Users and administrators should apply the security update provided in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34339 to remediate this vulnerability.