This vulnerability (CVE-2026-35423) involves an out-of-bounds read in the Telnet Client on Windows 10 Version 1607 (build 10.0.14393.0). An attacker without privileges can exploit this flaw remotely over the network to gain unauthorized information disclosure. The vulnerability is classified under CWE-125 (Out-of-bounds Read). Microsoft has published an official fix to remediate this issue.

Successful exploitation of this vulnerability could allow an attacker to read memory outside the intended buffer boundaries, leading to unauthorized disclosure of information. The vulnerability does not impact integrity but has a low impact on availability. The attack vector is network-based, requiring no privileges but user interaction. No known exploits are reported in the wild at this time.

An official fix is available from Microsoft. Users and administrators should apply the security update provided by Microsoft for Windows 10 Version 1607 to remediate this vulnerability. Refer to the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-35423 for the update details and installation instructions.