CVE-2026-85864: CWE-641: Improper Restriction of Names for Files and Other Resources in Microsoft Windows 10 Version 1607

CVE-2026-85864 is classified under CWE-641 (Improper Restriction of Names for Files and Other Resources) and impacts Microsoft Windows 10 Version 1607 and other related builds. The vulnerability arises from improper privilege management in Python components, enabling an authorized local attacker to elevate privileges on the affected system. The CVSS 3.1 base score is 7.8, indicating high severity, with attack vector local, low attack complexity, and no user interaction required. Confidentiality, integrity, and availability impacts are all rated high. Multiple Windows 10 versions are affected, with patches available and an official fix released by Microsoft. There are no known exploits in the wild at this time.

An authorized local attacker can exploit this vulnerability to elevate privileges, potentially gaining higher-level access to the affected system. This can lead to full compromise of confidentiality, integrity, and availability of the system resources.

An official fix is available from Microsoft. Users and administrators should apply the security updates provided by Microsoft for the affected Windows 10 versions as detailed in the vendor advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85864. No additional mitigation steps are indicated beyond applying the official patch.