CVE-2026-69347: CWE-122: Heap-based Buffer Overflow in Microsoft Windows 10 Version 1607

This vulnerability (CVE-2026-69347) is a heap-based buffer overflow in the Windows Fast FAT Driver component of Microsoft Windows 10, including Version 1607 and several other builds. The flaw allows an unauthorized attacker to execute code locally, potentially leading to full system compromise. The CVSS 3.1 base score is 7.4, reflecting high impact on confidentiality, integrity, and availability, with attack vector local and requiring high attack complexity and no privileges. Microsoft has published an official fix for this vulnerability.

Successful exploitation of this vulnerability allows an unauthorized local attacker to execute arbitrary code on the affected system, potentially leading to complete compromise of confidentiality, integrity, and availability of the system. The vulnerability is rated high severity with a CVSS score of 7.4.

An official fix is available from Microsoft. Users and administrators should apply the security updates provided by Microsoft for the affected Windows 10 versions as listed in the vendor advisory. No additional mitigation steps are indicated beyond applying the official patch.