CVE-2026-80096: CWE-125: Out-of-bounds Read in Microsoft Windows 10 Version 1607

This vulnerability (CVE-2026-80096) is an out-of-bounds read issue classified under CWE-125 found in Windows Remote Desktop Services on Windows 10 Version 1607 and other specified builds. An authorized attacker can exploit this flaw remotely to elevate privileges, potentially gaining higher-level access on the affected system. The CVSS 3.1 base score is 8.8, indicating high severity with network attack vector, low attack complexity, and no user interaction required. Microsoft has published an official fix addressing this vulnerability.

Successful exploitation allows an authorized attacker to elevate privileges remotely over the network, potentially leading to full system compromise. The vulnerability impacts confidentiality, integrity, and availability with high severity as indicated by the CVSS score of 8.8.

An official fix is available from Microsoft. Users and administrators should apply the security updates provided by Microsoft for the affected Windows 10 versions as soon as possible. Refer to the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80096 for detailed patch information and update instructions.