This vulnerability, identified as CVE-2026-50508, is categorized under CWE-200 (Exposure of Sensitive Information). It affects Windows 10 Version 1607 (build 10.0.14393.0) and involves the NTLM authentication protocol allowing unauthorized actors to spoof network communications and access sensitive information. The CVSS 3.1 base score is 6.5, indicating a medium severity with network attack vector, low attack complexity, no privileges required, and user interaction required. Microsoft has released an official fix for this vulnerability as documented in their security update guide.

An attacker can exploit this vulnerability to perform network spoofing and gain unauthorized access to sensitive information. The confidentiality of data is impacted (high impact on confidentiality), but integrity and availability are not affected. This could lead to information disclosure risks in affected Windows 10 Version 1607 systems.

An official fix is available from Microsoft and should be applied promptly to remediate this vulnerability. Refer to the Microsoft security update guide at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50508 for the patch and detailed remediation instructions.