CVE-2026-68833: CWE-122: Heap-based Buffer Overflow in Microsoft Windows 10 Version 1607

This vulnerability involves a heap-based buffer overflow in the Windows NTFS file system driver. It affects various builds of Windows 10, including Version 1607 and later builds up to specific patched versions. The flaw enables an attacker with physical access to the system to execute arbitrary code, potentially leading to full system compromise. The vulnerability is tracked as CWE-122 and has been assigned CVE-2026-68833. Microsoft has released an official patch to address this issue.

Successful exploitation of this vulnerability allows an unauthorized attacker with physical access to execute arbitrary code on the affected system. This can lead to full compromise of confidentiality, integrity, and availability of the system. The CVSS v3.1 score of 6.8 reflects a medium severity impact with high impact on confidentiality, integrity, and availability, but requiring physical attack vector and low attack complexity.

An official fix is available from Microsoft. Users and administrators should apply the security updates provided by Microsoft as detailed in the vendor advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68833. No additional mitigation steps are indicated beyond applying the official patch.