CVE-2026-69564: CWE-122: Heap-based Buffer Overflow in Microsoft Windows 10 Version 1607

This vulnerability involves a heap-based buffer overflow in the Windows OCSP component, which can be exploited by an authorized local attacker to gain elevated privileges. The affected versions include several Windows 10 builds starting from 10.0.14393.0 up to but not including 10.0.14393.9512, 10.0.17763.0 up to 10.0.17763.9245, 6.2.9200.0 up to 6.2.9200.26349, 6.3.9600.0 up to 6.3.9600.23398, 10.0.20348.0 up to 10.0.20348.5622, and 10.0.26100.0 up to 10.0.26100.33438. The vulnerability is tracked as CWE-122 (Heap-based Buffer Overflow) and has a CVSS v3.1 base score of 7.0, indicating high severity. Microsoft has published an official fix for this issue.

An authorized local attacker can exploit this heap-based buffer overflow vulnerability to elevate privileges on the affected Windows 10 systems. This could allow the attacker to execute code with higher privileges, potentially compromising system integrity, confidentiality, and availability.

An official fix is available from Microsoft for this vulnerability. It is recommended to apply the security updates provided by Microsoft as detailed in their advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69564. No additional mitigation steps are indicated beyond applying the official patch.