This vulnerability (CVE-2026-56186) is an out-of-bounds read in the Windows Schannel security package affecting Windows 10 Version 1607 (build 10.0.14393.0). It allows an attacker with some level of authorization to read memory beyond intended boundaries, potentially disclosing sensitive information over a network. The vulnerability has a CVSS 3.1 base score of 8.1, indicating high severity, with network attack vector, low attack complexity, and no user interaction required. Microsoft has published an official fix for this vulnerability.

An authorized attacker can exploit this vulnerability remotely over the network to disclose sensitive information from memory, potentially leading to information leakage. The integrity of the system is not affected, but availability is impacted (denial of service). There are no known exploits in the wild at this time.

An official fix is available from Microsoft. Users and administrators should apply the security update provided by Microsoft for Windows 10 Version 1607 as detailed in the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56186. No additional mitigations are required once the patch is applied.