This vulnerability, identified as CVE-2026-61347 and classified under CWE-126 (Buffer Over-read), affects Windows 10 Version 1607 (build 10.0.14393.0). It involves a buffer over-read in the Windows Event Logging Service that could be exploited by an authorized local user to disclose information. The CVSS 3.1 vector indicates the attack requires local access with low complexity and privileges, no user interaction, and impacts confidentiality with high severity but does not affect integrity or availability. Microsoft has published an official fix to remediate this vulnerability.

An authorized local attacker can exploit this vulnerability to read sensitive information from memory due to a buffer over-read condition in the Windows Event Logging Service. This could lead to disclosure of information that should otherwise be protected. There is no impact on system integrity or availability. No known exploits are reported in the wild at this time.

An official fix is available from Microsoft. It is recommended to apply the security update provided by Microsoft for Windows 10 Version 1607 (build 10.0.14393.0) as detailed in the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-61347. No additional mitigations are required beyond applying the official patch.