CVE-2026-69688: CWE-122: Heap-based Buffer Overflow in Microsoft Windows 10 Version 1607

This vulnerability involves a heap-based buffer overflow in the Windows Encrypting File System (EFS) component. An authorized attacker can exploit this flaw remotely over a network to elevate their privileges on the affected system. The vulnerability affects multiple specific builds of Windows 10, including but not limited to versions from 10.0.14393.0 up to but excluding 10.0.14393.9512, and other build ranges as detailed. Microsoft has published an official fix addressing this issue.

Successful exploitation allows an authorized attacker to elevate privileges, potentially gaining higher-level access on the affected Windows 10 systems. The impact includes confidentiality, integrity, and availability being compromised as indicated by the CVSS vector (C:H/I:H/A:H). There are no known exploits in the wild at this time.

An official fix is available from Microsoft. Users and administrators should apply the security updates provided by Microsoft for the affected Windows 10 versions as detailed in the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69688. No additional mitigation steps are indicated beyond applying the official patch.