This vulnerability involves a buffer over-read in the Windows NTFS file system driver on Windows 10 Version 1607 (build 10.0.14393.0). An authorized attacker with local access can exploit this flaw to read sensitive information from memory, potentially leading to information disclosure. The vulnerability does not affect integrity or availability, and user interaction is not required. Microsoft has released an official patch to address this issue.

Successful exploitation allows an authorized local attacker to disclose sensitive information by reading memory beyond the intended buffer limits in the NTFS driver. This can compromise confidentiality but does not affect system integrity or availability. There are no known exploits in the wild at this time.

An official fix is available from Microsoft. Users and administrators should apply the security update provided in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50341 to remediate this vulnerability.