This vulnerability, identified as CVE-2026-50401, involves an out-of-bounds read in the Windows Cloud Files Mini Filter Driver component of Microsoft Windows 10 Version 1809 (build 10.0.17763.0). The flaw permits an authorized attacker with local access and low complexity to read memory outside the intended bounds, potentially disclosing sensitive information. The vulnerability does not allow for integrity or availability impact but can lead to confidentiality compromise. Microsoft has published an official fix to remediate this issue.

An authorized local attacker can exploit this vulnerability to read memory beyond allocated bounds, leading to disclosure of sensitive information. There is no impact on system integrity or availability. The confidentiality impact is rated high, but overall severity is medium due to the requirement for local privileges and low attack complexity.

An official fix is available from Microsoft. Users and administrators should apply the security update provided in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50401 to remediate this vulnerability.