CVE-2026-69433: CWE-122: Heap-based Buffer Overflow in Microsoft Windows 10 Version 1607

This vulnerability, identified as CVE-2026-69433 and classified under CWE-122 (heap-based buffer overflow), exists in the Windows Error Reporting component of Microsoft Windows 10 Version 1607 and other specified versions. It enables an authorized local attacker to perform a privilege escalation by exploiting a heap-based buffer overflow. The CVSS 3.1 base score is 7.8, indicating high severity with impacts on confidentiality, integrity, and availability. Microsoft has released an official fix for this issue, and affected versions are those prior to the listed patch versions.

Successful exploitation allows an authorized local attacker to elevate privileges on the affected Windows 10 systems, potentially gaining higher-level access than intended. The vulnerability impacts confidentiality, integrity, and availability of the system as indicated by the CVSS vector. There are no known exploits in the wild at this time.

An official fix is available from Microsoft. Users and administrators should apply the security updates provided by Microsoft for the affected Windows 10 versions as detailed in the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69433. No additional mitigation steps are indicated by the vendor advisory.