CVE-2026-69453: CWE-862: Missing Authorization in Microsoft Windows 10 Version 1607

This vulnerability, identified as CWE-862 (Missing Authorization), exists in the Windows Search Component of Microsoft Windows 10 Version 1607 and other related versions. It allows an attacker with local authorized access to perform unauthorized tampering actions due to insufficient authorization checks. The CVSS 3.1 base score is 5.5, indicating medium severity, with the vector showing local attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, no confidentiality impact, high integrity impact, no availability impact, and official remediation available. Multiple affected Windows 10 versions are listed with specific build ranges prior to patching.

An authorized local attacker can exploit this vulnerability to tamper with the system via the Windows Search Component. The impact is limited to integrity compromise without affecting confidentiality or availability. There are no known exploits in the wild at this time.

An official fix is available from Microsoft. Users and administrators should apply the security updates provided by Microsoft for the affected Windows 10 versions as detailed in the vendor advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69453. No additional mitigation actions are indicated by the vendor.