This vulnerability, identified as CWE-476 (NULL Pointer Dereference), affects the TCP/IP implementation in Microsoft Windows 10 Version 1607 (build 10.0.14393.0). It allows an attacker to cause a denial of service by triggering a NULL pointer dereference, which can crash the system or disrupt network functionality. The CVSS v3.1 base score is 7.4, indicating high severity. Microsoft has published an official fix for this vulnerability, as detailed in their security update guide.

Exploitation of this vulnerability results in denial of service (DoS) due to a NULL pointer dereference in the TCP/IP stack. This can cause affected systems to crash or become unresponsive, impacting availability. There is no impact on confidentiality or integrity according to the CVSS vector. No known exploits are reported in the wild at this time.

An official fix is available from Microsoft. Users and administrators should apply the security update provided by Microsoft for Windows 10 Version 1607 to remediate this vulnerability. Refer to the Microsoft security update guide at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40414 for detailed patch information and deployment instructions.