CVE-2026-69407: CWE-190: Integer Overflow or Wraparound in Microsoft Windows 10 Version 1607

This vulnerability involves an integer overflow or wraparound condition in the Volume Manager Driver component of Microsoft Windows 10 Version 1607 and other specified builds. An authorized local attacker can exploit this flaw to elevate privileges, potentially gaining higher system rights than intended. The issue affects multiple Windows 10 versions, including builds from 10.0.14393.0 up to but not including 10.0.14393.9512, and several other build ranges as specified. Microsoft has published an official fix to address this vulnerability.

Successful exploitation allows an authorized local attacker to elevate privileges, which can lead to full control over the affected system. The vulnerability impacts confidentiality, integrity, and availability, as indicated by the CVSS vector (C:H/I:H/A:H). There are no known exploits in the wild at this time.

An official fix is available from Microsoft. Users and administrators should apply the security updates provided by Microsoft for the affected Windows 10 versions as detailed in the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69407. Applying these updates will remediate the vulnerability.