CVE-2026-87702: CWE-190: Integer Overflow or Wraparound in Microsoft Windows 10 Version 1607

This vulnerability involves an integer overflow or wraparound condition in the Windows Resource Management (MRM) component. An authorized attacker with local access can exploit this flaw to elevate their privileges on the system. The issue affects multiple builds of Windows 10, including versions starting from 10.0.14393.0 up to but not including various patched builds such as 10.0.14393.9612 and others. The vulnerability is tracked as CVE-2026-87702 and is associated with CWE-190 (Integer Overflow or Wraparound). Microsoft has published an official security update addressing this issue.

Successful exploitation of this vulnerability allows an authorized local attacker to elevate their privileges, potentially gaining higher-level access than intended. This could lead to unauthorized actions on the affected system, compromising confidentiality, integrity, and availability.

An official fix is available from Microsoft. Users and administrators should apply the security updates provided by Microsoft for the affected Windows 10 versions as detailed in the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87702. No additional mitigation steps are indicated beyond applying the official patch.