CVE-2026-88226: CWE-125: Out-of-bounds Read in Microsoft Windows 10 Version 1607

This vulnerability, identified as CWE-125 (Out-of-bounds Read), exists in the Windows Storage Port Driver component of Microsoft Windows 10 across various versions including 1607 and later builds. It allows an attacker with physical access to the affected system to read memory outside the intended bounds, potentially leading to information disclosure. The vulnerability does not require user interaction or privileges and has a low attack complexity. Microsoft has published an official fix to address this issue.

Successful exploitation could lead to unauthorized disclosure of information from the affected system. The vulnerability does not impact integrity or availability but compromises confidentiality. No known exploits are reported in the wild at this time.

An official fix is available from Microsoft. Users and administrators should apply the security updates provided by Microsoft for the affected Windows 10 versions as detailed in the Microsoft Security Response Center advisory. No additional mitigation steps are indicated.