This vulnerability (CVE-2026-58539) involves an out-of-bounds read (CWE-125) in the Windows RDP implementation on Windows 10 Version 1607 (build 10.0.14393.0). It enables an attacker without privileges to cause information disclosure remotely via network access. The vulnerability has been assigned a CVSS 3.1 base score of 6.5, reflecting a network attack vector with low attack complexity, no privileges required, but requiring user interaction. The impact is high confidentiality impact with no integrity or availability impact. Microsoft has published an official fix to remediate this vulnerability.

An unauthorized attacker can exploit this out-of-bounds read vulnerability over the network to disclose sensitive information from the affected Windows 10 Version 1607 system. The confidentiality impact is high, but there is no impact on integrity or availability. This could potentially lead to information leakage that may aid further attacks.

An official fix is available from Microsoft for this vulnerability. Users and administrators should apply the security update provided by Microsoft as detailed in the vendor advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58539 to remediate this issue.