This vulnerability, identified as CWE-476 (NULL Pointer Dereference), affects Windows 10 Version 1607 (build 10.0.14393.0). It occurs in the Windows TCP/IP implementation, where an attacker can send specially crafted network packets to trigger a null pointer dereference, causing the system to crash or become unresponsive, resulting in a denial of service condition. The CVSS 3.1 base score is 7.5, reflecting a high severity with network attack vector, low attack complexity, no privileges or user interaction required, and an impact limited to availability. Microsoft has published an official fix to remediate this vulnerability.

An attacker can remotely cause a denial of service on affected Windows 10 Version 1607 systems by exploiting the null pointer dereference in the TCP/IP stack. This results in system crashes or unavailability, but does not compromise confidentiality or integrity of data. There are no known exploits in the wild at this time.

An official fix is available from Microsoft. Users and administrators should apply the security update provided in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59132 to remediate this vulnerability. No additional mitigation steps are required once the patch is applied.