CVE-2026-69381: CWE-125: Out-of-bounds Read in Microsoft Windows 10 Version 1607

This vulnerability (CVE-2026-69381) involves an out-of-bounds read in the Windows Storage Port Driver component of Microsoft Windows 10. It allows an attacker with physical access to the affected system to read memory beyond the intended buffer boundaries, potentially disclosing sensitive information. The issue affects multiple Windows 10 builds starting from version 1607 and later, as detailed by the affected version ranges. Microsoft has published an official fix addressing this vulnerability.

An attacker with physical access to a vulnerable Windows 10 system can exploit this out-of-bounds read flaw to disclose sensitive information from memory. The vulnerability does not allow privilege escalation, denial of service, or code execution. The impact is limited to information disclosure only.

An official fix is available from Microsoft. Users and administrators should apply the security updates provided by Microsoft for the affected Windows 10 versions as detailed in the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69381. No additional mitigation steps are required beyond applying the official patch.