This vulnerability (CVE-2026-58535) is classified as CWE-908 (Use of Uninitialized Resource) and affects Windows 10 Version 1607 (build 10.0.14393.0). It involves the use of an uninitialized resource in the Windows RDP service, which could allow an unauthorized attacker to disclose sensitive information remotely over the network. The vulnerability has a CVSS v3.1 base score of 6.5, with network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, and high impact on confidentiality. Microsoft has published an official fix for this vulnerability, as referenced in their security update guide.

An attacker who successfully exploits this vulnerability can disclose sensitive information remotely without requiring privileges but does require user interaction. The confidentiality impact is high, while integrity and availability are not affected. This could lead to unauthorized exposure of information over the network via the RDP service.

An official fix is available from Microsoft for this vulnerability. Users and administrators should apply the security update provided by Microsoft for Windows 10 Version 1607 (build 10.0.14393.0) as soon as possible to remediate this issue. Refer to the Microsoft security update guide at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58535 for detailed patch information and deployment instructions.