CVE-2026-69603: CWE-122: Heap-based Buffer Overflow in Microsoft Windows 10 Version 1607

This vulnerability involves a heap-based buffer overflow in the Windows Hyper-V component of Microsoft Windows 10. An authorized attacker with local access can exploit this flaw to execute arbitrary code, potentially leading to full system compromise. The issue affects multiple Windows 10 builds starting from version 1607 and other specified builds, with patches available for all affected versions. The CVSS 3.1 base score is 8.8, indicating high severity, with attack vector local, low attack complexity, and requiring privileges but no user interaction. The vulnerability has been officially addressed by Microsoft with an official fix.

Successful exploitation allows an authorized local attacker to execute arbitrary code with elevated privileges, potentially resulting in complete system compromise. The vulnerability impacts confidentiality, integrity, and availability of the affected systems.

Microsoft has released official patches addressing this vulnerability. Users and administrators should apply the provided updates to affected Windows 10 versions as soon as possible to mitigate the risk. Since an official fix is available, no additional mitigations are required beyond applying the patch.