This vulnerability (CWE-125) involves an out-of-bounds read in the Windows DHCP Server on Windows 10 Version 1607. An authorized attacker with low privileges can exploit this flaw locally to read memory beyond intended boundaries, potentially disclosing sensitive information. The vulnerability does not allow for privilege escalation, denial of service, or remote exploitation without local access. Microsoft has published an official security update to remediate this issue.

An authorized local attacker with low privileges can exploit this vulnerability to read memory outside of expected bounds, leading to disclosure of sensitive information. There is no indication of impact on system integrity or availability. The vulnerability requires local access and does not allow remote exploitation.

An official fix is available from Microsoft. Users and administrators should apply the security update provided in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45634 to remediate this vulnerability.