CVE-2026-78516: CWE-126: Buffer Over-read in Microsoft Windows 10 Version 1607

This vulnerability, identified as CWE-126 (Buffer Over-read), exists in the Windows Storage component of Microsoft Windows 10 Version 1607 and other related versions. It allows an authorized attacker to cause a buffer over-read condition that results in the insertion of sensitive information into files or directories accessible externally. This could lead to local information disclosure. The CVSS 3.1 base score is 4.3, reflecting a medium impact with a local attack vector requiring low complexity and no privileges but user interaction. Microsoft has published an official fix for this vulnerability.

An authorized attacker with local access and user interaction can exploit this vulnerability to disclose sensitive information by causing a buffer over-read in Windows Storage. The impact is limited to confidentiality loss without integrity or availability impact. There are no known exploits in the wild at this time.

An official fix is available from Microsoft. Users and administrators should apply the security updates provided by Microsoft for the affected Windows 10 versions as listed in the vendor advisory. No additional mitigation steps are indicated beyond applying the official patches.