CVE-2026-71341: CWE-125: Out-of-bounds Read in Microsoft Windows 10 Version 1607

CVE-2026-71341 is a vulnerability classified as CWE-125 (Out-of-bounds Read) found in the Windows Partition Management Driver. It affects various builds of Microsoft Windows 10, including Version 1607 and later builds up to specific patched versions. The flaw permits an authorized attacker with local access to read memory outside the intended bounds, potentially disclosing sensitive information. The vulnerability does not allow privilege escalation, denial of service, or integrity compromise, but it impacts confidentiality. Microsoft has published an official fix for this issue.

An authorized local attacker can exploit this vulnerability to read memory beyond intended boundaries in the Windows Partition Management Driver, leading to potential disclosure of sensitive information. The impact is limited to confidentiality loss without affecting system integrity or availability.

An official fix is available from Microsoft. It is recommended to apply the security updates provided in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71341 to remediate this vulnerability.