CVE-2026-69309: CWE-415: Double Free in Microsoft Windows 10 Version 1607

This vulnerability, identified as CVE-2026-69309, is a double free condition in the Windows Print Spooler components. It allows an authorized local attacker to elevate privileges by exploiting improper memory management. The affected versions include multiple Windows 10 builds starting from 10.0.14393.0 up to but excluding various patch versions such as 10.0.14393.9512 and others listed. The CVSS 3.1 base score is 7.0, indicating high severity, with attack vector local, high attack complexity, low privileges required, no user interaction, and impacts on confidentiality, integrity, and availability. Microsoft has released an official fix for this vulnerability.

An authorized local attacker can exploit this double free vulnerability in the Windows Print Spooler to elevate their privileges on the affected system. This could lead to full system compromise with high impact on confidentiality, integrity, and availability of the system.

An official fix is available from Microsoft. Users and administrators should apply the security updates provided by Microsoft for their specific Windows 10 versions as listed in the affected versions. Refer to the Microsoft security update guide at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69309 for detailed remediation instructions.