This vulnerability (CVE-2026-58545) is classified under CWE-284 (Improper Access Control) and affects the Windows Kernel in Windows 10 Version 1607 (build 10.0.14393.0). It enables an authorized local attacker to bypass a security feature, potentially leading to unauthorized access to sensitive information. The CVSS 3.1 vector indicates the attack requires local access with low complexity and privileges, no user interaction, and impacts confidentiality with no impact on integrity or availability. Microsoft has published an official fix to address this issue.

An authorized local attacker can bypass a security feature in the Windows Kernel, potentially leading to unauthorized disclosure of sensitive information (high confidentiality impact). There is no impact on integrity or availability. The vulnerability does not require user interaction and has low attack complexity, but requires local privileges.

An official fix is available from Microsoft. Users and administrators should apply the security update provided by Microsoft for Windows 10 Version 1607 (build 10.0.14393.0) as detailed in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58545. No additional mitigation steps are indicated by the vendor advisory.