This vulnerability involves an integer underflow (wrap or wraparound) condition in the Windows Kernel component of Microsoft Windows 10 Version 1607 (build 10.0.14393.0). It allows a local attacker with limited privileges to disclose sensitive information. The CVSS v3.1 vector indicates low attack complexity and privileges required, no user interaction, and high confidentiality impact without integrity or availability impact. Microsoft has released an official fix to address this vulnerability.

An authorized local attacker can exploit this integer underflow vulnerability to disclose sensitive information from the affected system. There is no impact on system integrity or availability. The confidentiality impact is rated high, meaning sensitive data could be exposed.

An official fix is available from Microsoft. Users and administrators should apply the security update provided by Microsoft for Windows 10 Version 1607 (build 10.0.14393.0) as detailed in the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50300. No additional mitigation steps are indicated by the vendor.