CVE-2026-85816: CWE-125: Out-of-bounds Read in Microsoft Windows 10 Version 1607

This vulnerability involves an out-of-bounds read in the Windows Wi-Fi Driver component of Microsoft Windows 10. It affects various builds starting from version 10.0.14393.0 up to but not including specific patched builds such as 10.0.14393.9612 and others listed. The flaw permits an authorized attacker on an adjacent network to read memory beyond intended boundaries, potentially disclosing sensitive information. The CVSS 3.1 vector indicates the attack requires adjacent network access, low attack complexity, and low privileges with no user interaction, impacting confidentiality but not integrity or availability. Microsoft has published an official fix for this vulnerability.

An attacker with authorized access on an adjacent network can exploit this vulnerability to read memory outside the intended bounds in the Windows Wi-Fi Driver, leading to information disclosure. There is no impact on system integrity or availability. No known exploits are reported in the wild at this time.

An official fix is available from Microsoft. Users and administrators should apply the security updates provided by Microsoft for the affected Windows 10 builds as detailed in the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85816. No additional mitigation actions are specified by the vendor.