CVE-2026-69591: CWE-125: Out-of-bounds Read in Microsoft Windows 10 Version 1809

This vulnerability involves an out-of-bounds read in the Windows NTFS file system driver, which could be exploited by an authorized attacker to disclose sensitive information remotely over a network. The issue affects multiple builds of Windows 10, including versions starting from 10.0.17763.0 up to but not including specific patched builds such as 10.0.17763.9245 and others listed. The vulnerability has been assigned CVE-2026-69591 and is tracked under CWE-125 (Out-of-bounds Read). Microsoft has published an official fix to address this issue.

An authorized attacker can exploit this vulnerability to read memory outside the intended bounds, potentially disclosing sensitive information over a network. The vulnerability does not allow for integrity or availability impact, only confidentiality is affected. There are no known exploits in the wild at this time.

An official fix is available from Microsoft. Users and administrators should apply the security updates provided by Microsoft for the affected Windows 10 versions as listed in the vendor advisory. No additional mitigation steps are indicated by the vendor advisory.