CVE-2026-69329: CWE-125: Out-of-bounds Read in Microsoft Windows 10 Version 1607

This vulnerability, identified as CVE-2026-69329, is an out-of-bounds read issue in the BranchCache feature of Microsoft Windows 10 Version 1607 and other specified builds. An attacker without privileges can exploit this flaw remotely over the network to cause a denial of service condition. The CVSS v3.1 base score is 7.5, reflecting high severity due to network attack vector, low attack complexity, no privileges required, and no user interaction needed. The vulnerability affects multiple Windows 10 builds from version 1607 through later updates, with patches available in updates beyond the specified affected versions. Microsoft has published an official security advisory and released fixes to address this issue.

Successful exploitation results in denial of service (availability impact) on affected Windows 10 systems via network-based attacks. There is no impact on confidentiality or integrity. The vulnerability can be triggered without authentication or user interaction, increasing the risk of disruption.

An official fix is available from Microsoft. Administrators should apply the latest security updates that include patches for CVE-2026-69329 as detailed in the Microsoft security advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69329. No additional mitigations are indicated by the vendor advisory.