CVE-2026-88115: CWE-125: Out-of-bounds Read in Microsoft Windows 10 Version 1607

This vulnerability, identified as CVE-2026-88115 and classified under CWE-125 (Out-of-bounds Read), affects Windows Server for NFS on Windows 10 Version 1607 and other related versions. It allows an attacker without privileges to execute arbitrary code remotely by exploiting an out-of-bounds read condition. The CVSS 3.1 base score is 8.8, indicating high severity, with network attack vector, low attack complexity, no privileges required, user interaction required, and high impact on confidentiality, integrity, and availability. Microsoft has published an official fix for this vulnerability.

Successful exploitation of this vulnerability could allow an unauthorized attacker to execute arbitrary code remotely on affected Windows systems, potentially leading to full system compromise. The impact includes complete loss of confidentiality, integrity, and availability of the affected system.

An official fix is available from Microsoft. Users and administrators should apply the security updates provided by Microsoft for the affected Windows versions as soon as possible. Refer to the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88115 for detailed patch information and guidance.