CVE-2026-69578VulnerabilityPublished 09/08/2026Updated 10/14/2026

CVE-2026-69578: CWE-197: Numeric Truncation Error in Microsoft Windows 10 Version 1607

Affects Microsoft Windows 10 Version 1607Source CVE Database V5

CVSS 3.1 base score

7.0High

Exploitation: Not in CISA KEV, no exploitation reported
EPSS: 0.3% chance of exploitation in 30 days – higher than 17% of CVEs
Patch: Available

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

What to do

AI-suggested

Microsoft has released an official fix for this vulnerability. Users and administrators should apply the security updates provided by Microsoft as detailed in the vendor advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69578 to remediate this issue.

Affected software

Product	Affected	Fixed in
MicrosoftWindows 10 Version 1607	Affected >=10.0.14393.0 <10.0.14393.9512	Fixed in–
MicrosoftWindows 10 Version 1809	Affected >=10.0.17763.0 <10.0.17763.9245	Fixed in–
MicrosoftWindows 10 Version 21H2	Affected >=10.0.19044.0 <10.0.19044.7725	Fixed in–
MicrosoftWindows 10 Version 22H2	Affected >=10.0.19045.0 <10.0.19045.7725	Fixed in–
MicrosoftWindows 11 version 23H2	Affected >=10.0.22631.0 <10.0.22631.7582	Fixed in–
MicrosoftWindows 11 Version 23H2	Affected >=10.0.22631.0 <10.0.22631.7582	Fixed in–
MicrosoftWindows 11 Version 24H2	Affected >=10.0.26100.0 <10.0.26100.9445	Fixed in–
MicrosoftWindows 11 Version 25H2	Affected >=10.0.26200.0 <10.0.26200.9445	Fixed in–
MicrosoftWindows 11 version 26H1	Affected >=10.0.28000.0 <10.0.28000.2954	Fixed in–
MicrosoftWindows Server 2012	Affected >=6.2.9200.0 <6.2.9200.26349	Fixed in–
MicrosoftWindows Server 2012 (Server Core installation)	Affected >=6.2.9200.0 <6.2.9200.26349	Fixed in–
MicrosoftWindows Server 2012 R2	Affected >=6.3.9600.0 <6.3.9600.23398	Fixed in–
MicrosoftWindows Server 2012 R2 (Server Core installation)	Affected >=6.3.9600.0 <6.3.9600.23398	Fixed in–
MicrosoftWindows Server 2016	Affected >=10.0.14393.0 <10.0.14393.9512	Fixed in–
MicrosoftWindows Server 2016 (Server Core installation)	Affected >=10.0.14393.0 <10.0.14393.9512	Fixed in–
MicrosoftWindows Server 2019	Affected >=10.0.17763.0 <10.0.17763.9245	Fixed in–
MicrosoftWindows Server 2019 (Server Core installation)	Affected >=10.0.17763.0 <10.0.17763.9245	Fixed in–
MicrosoftWindows Server 2022	Affected >=10.0.20348.0 <10.0.20348.5622	Fixed in–
MicrosoftWindows Server 2025	Affected >=10.0.26100.0 <10.0.26100.33438	Fixed in–
MicrosoftWindows Server 2025 (Server Core installation)	Affected >=10.0.26100.0 <10.0.26100.33438	Fixed in–

Description

CVE-2026-69578 is a numeric truncation error vulnerability in the Windows Kernel affecting Windows 10 Version 1607 and related builds. It allows an authorized local attacker to elevate privileges. The vulnerability has a high severity rating with a CVSS score of 7. An official fix is available from Microsoft.

Summary

This vulnerability, identified as CVE-2026-69578, involves a numeric truncation error in the Windows Kernel. It affects multiple builds of Windows 10 Version 1607 and related versions. The flaw allows an authorized attacker with local access to elevate their privileges, potentially gaining higher system rights. The CVSS 3.1 vector indicates it requires local attack vector with high attack complexity and low privileges, no user interaction, and impacts confidentiality, integrity, and availability with high severity. Microsoft has published an official fix for this issue.

Impact

An authorized local attacker can exploit this numeric truncation error in the Windows Kernel to elevate their privileges, potentially gaining administrative rights. This can lead to full system compromise, affecting confidentiality, integrity, and availability of the system.

Weaknesses

CWE-197Unclassified weakness (opens in a new tab)

References

msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69578 (opens in a new tab)

What to do

Affected software

Description

AnalysisAI-generated, updated 10/16/2026, 21:22:17 UTC

Technical details

Weaknesses

References

Related threats