CVE-2026-71349: CWE-122: Heap-based Buffer Overflow in Microsoft Windows 10 Version 1607

This vulnerability involves a heap-based buffer overflow in the Windows Spaceport.sys driver component of Microsoft Windows 10, including Version 1607 and other specified builds. The flaw allows an attacker with physical access to the affected system to execute arbitrary code, potentially leading to full system compromise. The vulnerability is tracked as CVE-2026-71349 and is classified under CWE-122 (Heap-based Buffer Overflow). Multiple Windows 10 versions are affected, with patches provided by Microsoft to remediate the issue.

Successful exploitation of this vulnerability can result in arbitrary code execution with elevated privileges on affected Windows 10 systems. This can lead to full system compromise, including confidentiality, integrity, and availability impacts. The attack requires physical access to the vulnerable system.

An official fix is available from Microsoft for all affected versions. Users and administrators should apply the security updates provided by Microsoft as detailed in the vendor advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71349 to remediate this vulnerability.