CVE-2026-85798: CWE-122: Heap-based Buffer Overflow in Microsoft Windows 10 Version 1607

This vulnerability (CVE-2026-85798) involves a heap-based buffer overflow in the Windows Distributed File System (DFS) on affected versions of Microsoft Windows 10, including Version 1607 and several subsequent builds. An attacker with authorized access can exploit this flaw over a network to execute arbitrary code, potentially leading to full system compromise. The CVSS 3.1 base score is 7.2, reflecting high impact on confidentiality, integrity, and availability. Microsoft has published an official fix for this vulnerability.

Successful exploitation allows an authorized attacker to execute arbitrary code remotely over the network, potentially leading to full compromise of the affected system. The vulnerability impacts confidentiality, integrity, and availability of the system.

An official fix is available from Microsoft. Users and administrators should apply the security updates provided by Microsoft for the affected Windows 10 versions to remediate this vulnerability. Refer to the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85798 for detailed patch information and update instructions.