CVE-2026-69328: CWE-426: Untrusted Search Path in Microsoft Windows 10 Version 1607

This vulnerability (CWE-426) involves an untrusted search path in the Windows Storage component of Windows 10 Version 1607. An authorized attacker with local access can exploit this flaw to elevate their privileges on the affected system. The issue has been assigned CVE-2026-69328 and carries a CVSS 3.1 base score of 7.8, indicating high severity. Multiple Windows 10 builds are affected, with patches released to address the issue. Microsoft has published an official advisory and remediation for this vulnerability.

Successful exploitation allows an authorized local attacker to elevate privileges, potentially gaining higher-level access and control over the affected Windows 10 system. The confidentiality, integrity, and availability of the system can be fully compromised as indicated by the CVSS impact metrics (C:H/I:H/A:H).

An official fix is available from Microsoft. Users and administrators should apply the security updates provided by Microsoft for the affected Windows 10 versions as detailed in the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69328. No additional mitigation steps are indicated beyond applying the official patch.