This vulnerability (CVE-2026-20868) involves a heap-based buffer overflow in the Windows Routing and Remote Access Service (RRAS) component of Microsoft Windows 10 Version 1607 (build 10.0.14393.0). Exploitation could allow an unauthenticated attacker to execute arbitrary code remotely. The vulnerability has been assigned a CVSS v3.1 base score of 8.8, indicating high impact on confidentiality, integrity, and availability. Microsoft has released an official fix to remediate this issue, as documented in their security update guide.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code on the affected system remotely without requiring prior authentication. This could lead to full system compromise, including complete control over confidentiality, integrity, and availability of the system.

An official fix is available from Microsoft for this vulnerability. Users and administrators should apply the security update provided by Microsoft as soon as possible to remediate the issue. Refer to the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20868 for detailed patching instructions.