CVE-2026-96915: CWE-190: Integer Overflow or Wraparound in Microsoft Windows 10 Version 1607

This vulnerability involves an integer overflow or wraparound condition in Windows Kernel-Mode Drivers on affected versions of Microsoft Windows 10. Exploitation requires local authorized access and can lead to privilege escalation. The issue is tracked as CWE-190. Multiple Windows 10 versions are affected, with patches provided by Microsoft to remediate the flaw. The vulnerability is documented under CVE-2026-96915 with a CVSS 3.1 score of 7.8, indicating high severity.

An authorized local attacker can exploit this integer overflow or wraparound vulnerability to elevate privileges on the affected Windows 10 systems. This could allow the attacker to gain higher-level access than intended, potentially compromising system integrity and security.

An official fix is available from Microsoft. Users and administrators should apply the security updates provided by Microsoft for the affected Windows 10 versions as detailed in the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96915. No additional mitigation steps are indicated beyond applying the official patch.