CVE-2026-69359: CWE-122: Heap-based Buffer Overflow in Microsoft Windows 10 Version 1607

This vulnerability involves a heap-based buffer overflow in Active Directory Domain Services on Windows 10 Version 1607 and subsequent versions up to specific build numbers. An authorized local attacker can exploit this flaw to elevate privileges on the affected system. The vulnerability is tracked as CWE-122 and has been assigned CVE-2026-69359. Microsoft has published an official security update to remediate the issue.

Successful exploitation allows an authorized local attacker to gain elevated privileges, potentially leading to full control over the affected system. The vulnerability impacts confidentiality, integrity, and availability as indicated by the CVSS vector (C:H/I:H/A:H). There are no known exploits in the wild at this time.

An official fix from Microsoft is available and should be applied to affected systems. The vendor advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69359 provides detailed update guidance. Applying the security update will mitigate the vulnerability.