This vulnerability involves a race condition (CWE-362) in the Windows Network File System on Windows 10 Version 1607. Improper synchronization during concurrent execution of shared resources can be exploited by an attacker over a network to execute arbitrary code. The issue affects Windows 10 Version 1607 specifically at build 10.0.14393.0. Microsoft has released an official fix to address this vulnerability.

An unauthorized attacker can exploit this race condition remotely over the network to execute code on the affected system. While the vulnerability does not impact confidentiality or integrity directly, it results in a denial of service or system availability impact if exploited. No known exploits are currently reported in the wild.

An official fix is available from Microsoft. Users and administrators should apply the security update provided in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56649 to remediate this vulnerability.