This vulnerability (CVE-2026-50496) involves an out-of-bounds read in the SNMP functionality of Windows Network Policy Server on Windows 10 Version 1607 (build 10.0.14393.0). The flaw permits an attacker without privileges or user interaction to potentially disclose information remotely over the network. Microsoft has published an official fix for this vulnerability, as detailed in their security advisory.

An attacker can exploit this out-of-bounds read vulnerability remotely without authentication or user interaction to disclose information from the affected system. While the vulnerability does not impact confidentiality or integrity directly, it results in a denial of service (availability impact) as indicated by the CVSS vector. No known exploits are reported in the wild at this time.

An official fix is available from Microsoft. Users and administrators should apply the security update provided in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50496 to remediate this vulnerability.