This vulnerability involves an exposure of sensitive information in the Windows Win32K subsystem on Windows 10 Version 1607 (build 10.0.14393.0). The flaw allows a local attacker without privileges to gain access to sensitive data, which could lead to local privilege escalation. The CVSS 3.1 base score is 6.2, indicating a medium severity. Microsoft has released an official fix for this vulnerability, as documented in their security update guide.

An unauthorized local attacker can access sensitive information that should be protected, potentially enabling them to elevate their privileges on the affected system. There is no indication of impact to system integrity or availability. No known exploits are reported in the wild at this time.

Apply the official security update provided by Microsoft for Windows 10 Version 1607 to remediate this vulnerability. Refer to the Microsoft Security Update Guide at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57095 for the patch and detailed remediation instructions.