CVE-2026-68839: CWE-122: Heap-based Buffer Overflow in Microsoft Windows 10 Version 1607

This vulnerability is a heap-based buffer overflow in the Windows USB Mass Storage Class Driver that enables remote code execution by an attacker without requiring privileges or user interaction. It affects multiple Windows 10 builds starting from version 1607 and later updates up to certain build numbers before patches were applied. The vulnerability is tracked as CVE-2026-68839 and is assigned a critical severity with a CVSS 3.1 base score of 9.8. Microsoft has released official fixes for the affected versions.

Successful exploitation allows an attacker to execute arbitrary code remotely with no privileges or user interaction required, potentially leading to full system compromise. The impact includes complete confidentiality, integrity, and availability loss on affected systems.

Microsoft has released official patches that address this vulnerability. Users and administrators should apply these updates promptly to affected Windows 10 versions. Since an official fix is available, remediation should be performed by installing the vendor-supplied updates as detailed in the Microsoft security advisory.