CVE-2026-69316: CWE-126: Buffer Over-read in Microsoft Windows 10 Version 1607

This vulnerability, identified as CWE-126 (Buffer Over-read), exists in the Windows Overlay Filter component of Microsoft Windows 10 Version 1607 and subsequent updates. An authorized attacker with low privileges can exploit this flaw locally to read sensitive information beyond allocated buffer limits. The issue does not allow privilege escalation, denial of service, or code execution but can lead to information disclosure. Multiple affected Windows 10 versions prior to specific patch builds are impacted. Microsoft has published an official fix to remediate this vulnerability.

An authorized local attacker with low privileges can exploit this vulnerability to disclose sensitive information by causing a buffer over-read in the Windows Overlay Filter. There is no indication of impact on system integrity or availability, and no known exploits are reported in the wild at this time.

Microsoft has released official patches that address this vulnerability. Users and administrators should apply the latest security updates for their specific Windows 10 versions as detailed in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69316. No additional mitigation steps are required beyond applying these official fixes.