CVE-2026-88165: CWE-787: Out-of-bounds Write in Microsoft Windows 10 Version 1607

This vulnerability (CVE-2026-88165) involves an out-of-bounds write in Active Directory Domain Services on Microsoft Windows 10 Version 1607 and other related versions. Exploitation requires an attacker with some level of authorization to execute code remotely over a network. The CVSS 3.1 base score is 8.8, indicating high severity with network attack vector, low attack complexity, and no user interaction required. The vulnerability impacts confidentiality, integrity, and availability. Microsoft has published an official fix for the affected versions.

Successful exploitation allows an authorized attacker to execute arbitrary code remotely on affected Windows 10 systems, potentially leading to full system compromise. The vulnerability impacts confidentiality, integrity, and availability of the system. No known exploits are reported in the wild at this time.

An official fix is available from Microsoft. Users and administrators should apply the security updates provided by Microsoft for the affected Windows 10 versions as listed in the vendor advisory. No additional mitigation steps are indicated beyond applying the official patches.