CVE-2026-69547: CWE-122: Heap-based Buffer Overflow in Microsoft Windows 10 Version 1607

This vulnerability (CVE-2026-69547) involves a heap-based buffer overflow in the Windows DHCP Server. An authorized attacker can exploit this flaw remotely to execute arbitrary code on affected systems. The vulnerability affects several Windows versions, including Windows 10 Version 1607 and others, specifically versions within the ranges: >=10.0.14393.0 <10.0.14393.9512, >=10.0.17763.0 <10.0.17763.9245, >=6.2.9200.0 <6.2.9200.26349, >=6.3.9600.0 <6.3.9600.23398, >=10.0.20348.0 <10.0.20348.5622, and >=10.0.26100.0 <10.0.26100.33438. The vulnerability is rated high severity with a CVSS 3.1 score of 8.8, indicating it is exploitable over the network with low attack complexity and requires privileges. Microsoft has issued official patches to remediate this vulnerability.

Successful exploitation of this heap-based buffer overflow can lead to remote code execution with high impact on confidentiality, integrity, and availability. An attacker with authorized network access to the DHCP Server can execute arbitrary code, potentially taking full control of the affected system.

Microsoft has released official security updates that address this vulnerability. It is strongly recommended to apply these patches promptly to affected Windows versions. No additional mitigation steps are indicated by the vendor advisory.