CVE-2026-97804: CWE-122: Heap-based Buffer Overflow in Microsoft Windows 10 Version 1607

This vulnerability is a heap-based buffer overflow in the Human Interface Device (HID) class driver on Windows 10 Version 1607. An authorized local attacker can exploit this flaw to elevate privileges on the affected system. The vulnerability affects multiple builds of Windows 10 Version 1607, with specific affected build ranges provided. The CVSS v3.1 base score is 7.8, indicating high severity. Microsoft has published an official fix and remediation guidance is available on their security update guide.

Successful exploitation allows an authorized local attacker to elevate privileges, potentially gaining higher-level access on the affected Windows 10 systems. This can lead to full system compromise depending on the privileges gained. The vulnerability impacts confidentiality, integrity, and availability (all rated high in CVSS).

An official fix is available from Microsoft. Users and administrators should apply the security updates provided by Microsoft for the affected Windows 10 Version 1607 builds as detailed in the Microsoft Security Update Guide (https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97804). No additional mitigation steps are indicated beyond applying the official patch.