CVE-2026-70579: CWE-125: Out-of-bounds Read in Microsoft Windows 10 Version 21H2

This vulnerability (CWE-125) is an out-of-bounds read issue in the Windows Mobile Broadband component of Microsoft Windows 10 Version 21H2. It enables an attacker to remotely disclose information by reading memory outside the intended bounds. The vulnerability affects multiple Windows 10 builds starting from 10.0.19044.0 up to but not including various patched builds (e.g., <10.0.19044.7725). The CVSS 3.1 base score is 7.5, indicating high severity, with network attack vector, low attack complexity, no privileges or user interaction required, and impact limited to confidentiality. Microsoft has published an official fix for this vulnerability.

An unauthorized attacker can remotely exploit this vulnerability to disclose sensitive information from the affected system's memory. The impact is limited to confidentiality loss; integrity and availability are not affected. No privileges or user interaction are required to exploit this vulnerability.

An official fix is available from Microsoft. Users and administrators should apply the security updates provided by Microsoft for the affected Windows 10 builds to remediate this vulnerability. Refer to the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70579 for detailed patch information and update instructions.