CVE-2026-85805: CWE-358: Improperly Implemented Security Check for Standard in Microsoft Windows 10 Version 1607

This vulnerability (CVE-2026-85805) is caused by an improperly implemented security check in Windows PowerShell on affected Windows 10 versions. It allows an unauthorized attacker to bypass a security feature remotely over a network. The CVSS 3.1 base score is 6.5, reflecting network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality impact, high integrity impact, no availability impact, and official remediation. Multiple Windows 10 builds are affected, with fixed versions starting at the exclusive upper bounds listed. Microsoft has released an official fix for this vulnerability.

An attacker can bypass a security feature in Windows PowerShell remotely without privileges, potentially leading to integrity compromise of the system. Confidentiality and availability are not impacted. There are no known exploits in the wild at this time.

An official fix is available from Microsoft. Users and administrators should apply the security updates provided by Microsoft for the affected Windows 10 versions as detailed in the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85805. No additional mitigation actions are indicated by the vendor advisory.