CVE-2026-69332: CWE-125: Out-of-bounds Read in Microsoft Windows 10 Version 1607

This vulnerability (CWE-125) involves an out-of-bounds read in the Windows NTFS file system driver, which can be exploited by an authorized attacker over a network to elevate privileges. The flaw affects multiple Windows 10 versions starting from build 14393 up to specific patched builds. The CVSS 3.1 base score is 8.0, indicating high severity with network attack vector, low attack complexity, and requiring privileges and user interaction. Confidentiality, integrity, and availability impacts are all high. Microsoft has published an official fix for this vulnerability.

Successful exploitation allows an authorized attacker to elevate privileges remotely over a network, potentially gaining higher system privileges and control. The vulnerability impacts confidentiality, integrity, and availability of the affected systems at a high level.

Microsoft has released an official fix for this vulnerability. It is recommended to apply the security updates provided by Microsoft as detailed in their advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69332. No additional mitigation steps are specified beyond applying the official patch.