This vulnerability, identified as CWE-125, involves an out-of-bounds read in the Windows NTFS file system driver on Windows 10 Version 1607 (build 10.0.14393.0). An attacker with local authorized access can exploit this flaw to read memory beyond allocated buffers, potentially disclosing sensitive information. The vulnerability does not allow for privilege escalation, denial of service, or code execution. Microsoft has released an official patch to remediate this issue.

The impact of this vulnerability is limited to information disclosure. An authorized local attacker can read memory outside the intended bounds, potentially exposing sensitive data. There is no impact on system integrity or availability, and no known exploits are currently active in the wild.

An official fix is available from Microsoft. It is recommended to apply the security update provided in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65784 to remediate this vulnerability.