This vulnerability (CVE-2026-34339) is a null pointer dereference in the Lightweight Directory Access Protocol (LDAP) implementation in Microsoft Windows 10 Version 1607 (build 10.0.14393.0). An authorized attacker with local access can exploit this flaw to cause a denial of service condition by crashing the affected service or system component. The CVSS 3.1 base score is 5.5 (medium), reflecting local attack vector, low complexity, and no impact on confidentiality or integrity. Microsoft has released an official fix for this issue as documented in their security update guide.

The vulnerability allows an authorized local attacker to cause a denial of service by triggering a null pointer dereference in the Windows LDAP service. There is no impact on confidentiality or integrity. The availability of the affected system or service can be disrupted until recovery or restart.

An official fix is available from Microsoft. Users and administrators of Windows 10 Version 1607 (build 10.0.14393.0) should apply the security update provided in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34339 to remediate this vulnerability.