CVE-2026-68844: CWE-122: Heap-based Buffer Overflow in Microsoft Windows 10 Version 1607

This vulnerability involves a heap-based buffer overflow in the Windows Storage Spaces Controller, which is part of Microsoft Windows 10 Version 1607 and subsequent builds. An attacker with local authorized access can exploit this flaw to execute arbitrary code, potentially leading to full system compromise. The CVSS 3.1 base score is 7.8, reflecting high impact on confidentiality, integrity, and availability. The vulnerability affects multiple Windows 10 builds starting from version 10.0.14393.0 up to but not including various patch levels (e.g., <10.0.14393.9512, <10.0.17763.9245, etc.). Microsoft has issued an official fix for this vulnerability, as documented in their security update guide.

Successful exploitation allows an authorized local attacker to execute arbitrary code on the affected system, potentially leading to full compromise of confidentiality, integrity, and availability of the system. This could enable privilege escalation and control over the affected Windows 10 system.

An official fix is available from Microsoft. Users and administrators should apply the security updates provided by Microsoft for Windows 10 Version 1607 and later affected builds as soon as possible. Refer to the Microsoft Security Update Guide at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68844 for detailed patch information and deployment instructions.