This vulnerability involves an out-of-bounds read in the Windows USB Audio Class driver (usbaudio.sys) on Windows 10 Version 1607 (build 10.0.14393.0). The flaw could be exploited by an attacker with physical access to the device to disclose sensitive information. The vulnerability is tracked as CWE-125 and has a CVSS 3.1 base score of 6.1, indicating medium severity. Microsoft has released an official fix to remediate this issue.

An attacker with physical access to a vulnerable system could exploit this out-of-bounds read vulnerability to disclose sensitive information. The vulnerability does not allow for privilege escalation or denial of service but impacts confidentiality and availability as indicated by the CVSS vector (C:H, I:N, A:H). There are no known exploits in the wild at this time.

An official fix is available from Microsoft. Users and administrators should apply the security update provided by Microsoft for Windows 10 Version 1607 (build 10.0.14393.0) as detailed in the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50453.