This vulnerability (CVE-2026-62750) arises from a partial string comparison weakness (CWE-187) in the Windows HTTP Protocol Stack component of Windows 10 Version 1607 (build 10.0.14393.0). The flaw allows an attacker with network adjacency to tamper with communications by exploiting the improper string comparison logic. The CVSS 3.1 base score is 6.5, reflecting a medium severity with network attack vector, low attack complexity, no privileges or user interaction required, and impact limited to integrity. Microsoft has published an official fix to remediate this vulnerability.

An attacker on an adjacent network could exploit this vulnerability to tamper with HTTP protocol communications on the affected Windows 10 Version 1607 system. The impact is limited to integrity compromise; confidentiality and availability are not affected. There are no known exploits in the wild at this time.

An official fix is available from Microsoft. Users and administrators should apply the security update provided by Microsoft for Windows 10 Version 1607 to remediate this vulnerability. Refer to the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62750 for detailed patch information and guidance.