CVE-2026-83992: CWE-122: Heap-based Buffer Overflow in Microsoft Windows 10 Version 1607

This vulnerability (CVE-2026-83992) is a heap-based buffer overflow in the Windows Imaging Component of Microsoft Windows 10 Version 1607 and other specified builds. It enables remote code execution by an attacker without privileges, requiring user interaction. The CVSS 3.1 base score is 8.8, reflecting network attack vector, low attack complexity, no privileges required, user interaction needed, and high impact on confidentiality, integrity, and availability. Multiple Windows 10 builds are affected, and Microsoft has released an official fix to address this issue.

Successful exploitation allows an attacker to execute arbitrary code remotely on affected Windows 10 systems, potentially leading to full system compromise including complete confidentiality, integrity, and availability loss. The vulnerability requires user interaction but no privileges or authentication, increasing its risk in networked environments.

An official fix is available from Microsoft. Users and administrators should apply the security updates provided in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83992 to remediate this vulnerability. No additional mitigation steps are indicated by the vendor.