CVE-2026-69715: CWE-125: Out-of-bounds Read in Microsoft Windows 10 Version 1607

CVE-2026-69715 is an out-of-bounds read vulnerability classified under CWE-125 in the Windows Direct Show component of Microsoft Windows 10. It enables remote code execution by an unauthorized attacker over a network. The vulnerability affects multiple Windows 10 versions starting from build 10.0.14393.0 up to but not including various patched builds (e.g., <10.0.14393.9512, <10.0.17763.9245, etc.). Microsoft has published an official fix for this vulnerability as detailed in their security advisory.

Successful exploitation of this vulnerability allows an attacker to execute arbitrary code remotely without any privileges or user interaction, potentially leading to full system compromise. The CVSS 3.1 base score of 9.8 reflects critical impact on confidentiality, integrity, and availability of affected systems.

An official fix is available from Microsoft. Users and administrators should apply the security updates provided by Microsoft for the affected Windows 10 versions as soon as possible. Refer to the Microsoft security advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69715 for detailed patch information and update instructions.