CVE-2026-96867: CWE-125: Out-of-bounds Read in Microsoft Windows 10 Version 1607

This vulnerability (CVE-2026-96867) involves an out-of-bounds read in the Windows NTFS file system driver. It affects various builds of Windows 10, including Version 1607 and later versions up to specific build numbers. An authorized attacker with local access can exploit this flaw to execute arbitrary code on the system. The CVSS v3.1 base score is 7.8, indicating high severity, with attack vector local, low attack complexity, and requiring privileges. Microsoft has released an official fix for this vulnerability.

Successful exploitation allows an authorized local attacker to execute arbitrary code with elevated privileges, potentially leading to full system compromise. The vulnerability impacts confidentiality, integrity, and availability of the affected Windows 10 systems.

Microsoft has released an official fix for this vulnerability. Users and administrators should apply the security updates provided by Microsoft as detailed in the vendor advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96867. No additional mitigation actions are required beyond applying the official patch.