CVE-2026-69714: CWE-121: Stack-based Buffer Overflow in Microsoft Windows 10 Version 1607

This vulnerability (CVE-2026-69714) involves a stack-based buffer overflow in the Windows Device Association Service component of Microsoft Windows 10. It allows an attacker with authorized access over a network to elevate their privileges on the affected system. The vulnerability affects multiple Windows 10 builds starting from version 10.0.14393.0 up to but not including various patched builds (e.g., <10.0.14393.9512, <10.0.17763.9245, etc.). The CVSS v3.1 base score is 8.0, indicating high severity with network attack vector, low attack complexity, required privileges, and user interaction. The impact includes high confidentiality, integrity, and availability impacts. Microsoft has released official patches to address this vulnerability.

An authorized attacker can exploit this vulnerability remotely over a network to elevate privileges, potentially gaining higher-level access than intended. The vulnerability impacts confidentiality, integrity, and availability of the affected system at a high level. There are no known exploits in the wild at this time.

An official fix is available from Microsoft. Users and administrators should apply the security updates provided by Microsoft for the affected Windows 10 versions as listed in the vendor advisory. No additional mitigation steps are required beyond applying the official patches.