This vulnerability involves an out-of-bounds read in the Microsoft UxTheme Library (uxtheme.dll) on Windows 10 Version 1607 (build 10.0.14393.0). An authorized attacker with local access can exploit this flaw to cause a denial of service condition. The issue does not impact confidentiality or integrity but affects availability. Microsoft has published an official fix to address this vulnerability.

The vulnerability allows a local attacker with authorized access to cause a denial of service on affected Windows 10 Version 1607 systems. There is no impact on confidentiality or integrity. No known exploits are reported in the wild.

An official fix is available from Microsoft. Users and administrators should apply the security update provided by Microsoft to remediate this vulnerability. Refer to the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45606 for the patch and update instructions.