CVE-2026-69568: CWE-125: Out-of-bounds Read in Microsoft Windows 10 Version 1607

This vulnerability involves an out-of-bounds read in the Windows Storage Spaces Controller component of Microsoft Windows 10. It affects several specific builds of Windows 10 starting from version 1607 and later, allowing an authorized attacker with local access to read memory beyond intended boundaries, potentially disclosing sensitive information. The issue does not allow for privilege escalation, denial of service, or integrity compromise, but impacts confidentiality. Microsoft has published an official fix addressing this vulnerability.

An authorized local attacker can exploit this vulnerability to read memory outside the intended buffer boundaries in the Windows Storage Spaces Controller, leading to information disclosure. There is no indication of impact on system integrity or availability. The vulnerability requires local privileges and does not involve user interaction.

Microsoft has released an official fix for this vulnerability. Users and administrators should apply the security updates provided by Microsoft to affected Windows 10 versions to remediate this issue. No additional mitigation actions are indicated by the vendor advisory.