This vulnerability (CVE-2026-35422) affects Microsoft Windows 10 Version 1607 (build 10.0.14393.0). It is classified as CWE-288: Authentication Bypass Using an Alternate Path or Channel. The flaw allows an attacker with some level of authorization and network access to bypass a security feature by exploiting an alternate communication path in the Windows TCP/IP implementation. The CVSS v3.1 base score is 6.5 (medium severity), reflecting network attack vector, low attack complexity, required privileges, no user interaction, unchanged scope, no confidentiality or availability impact, but high integrity impact. Microsoft has published an official fix for this vulnerability as referenced in their security update guide.

An authorized attacker who can access the network may bypass certain security features in Windows 10 Version 1607, potentially allowing unauthorized actions that affect system integrity. There is no impact on confidentiality or availability. No known exploits are reported in the wild at this time.

An official fix is available from Microsoft. Users and administrators should apply the security update provided by Microsoft as detailed in their advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-35422 to remediate this vulnerability.