CVE-2026-96862: CWE-125: Out-of-bounds Read in Microsoft Windows 10 Version 1607

This vulnerability (CVE-2026-96862) is an out-of-bounds read issue in the Windows Spaceport.sys driver affecting multiple Windows 10 versions including 1607 and later builds. An authorized local attacker can exploit this flaw to elevate privileges on the affected system. The CVSS 3.1 base score is 7.8, reflecting high impact on confidentiality, integrity, and availability. Microsoft has published an official fix for this vulnerability, as documented in their security update guide.

Successful exploitation allows an authorized local attacker to gain elevated privileges, potentially leading to full system compromise. The vulnerability impacts confidentiality, integrity, and availability of the affected systems. There are no known exploits in the wild currently.

An official fix is available from Microsoft. Users and administrators should apply the security updates provided by Microsoft for the affected Windows 10 versions as soon as possible. Refer to the Microsoft security update guide at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96862 for detailed patch information and deployment instructions.