CVE-2026-72932: CWE-126: Buffer Over-read in Microsoft Windows 10 Version 1607

This vulnerability, identified as CWE-126 (Buffer Over-read), exists in the Windows Message Queuing Queue Manager in multiple versions of Microsoft Windows 10, including Version 1607 and later builds up to specific patched versions. An attacker can exploit this flaw remotely to read sensitive information from memory, leading to information disclosure. The CVSS v3.1 base score is 7.5, indicating high severity, with network attack vector, low attack complexity, no privileges required, and no user interaction needed. Microsoft has released an official fix for this vulnerability.

Successful exploitation of this vulnerability allows an unauthenticated attacker to remotely disclose sensitive information from the affected system's memory. This could lead to leakage of confidential data, potentially aiding further attacks. There is no impact on integrity or availability reported.

An official fix is available from Microsoft. Users and administrators should apply the security updates provided by Microsoft for the affected Windows 10 versions as detailed in the Microsoft Security Response Center advisory. No additional mitigation steps are indicated beyond applying the official patches.