CVE-2026-97817: CWE-122: Heap-based Buffer Overflow in Microsoft Windows 10 Version 1607

This vulnerability is a heap-based buffer overflow in the DNS Server of Microsoft Windows 10 Version 1607 and other specified builds. It enables an authorized attacker to disclose information remotely over a network. The CVSS 3.1 vector indicates network attack vector, low attack complexity, required privileges, no user interaction, unchanged scope, high confidentiality impact, no integrity or availability impact, and official remediation with confirmed fix. Multiple Windows 10 builds are affected, with patches available in later versions.

An authorized attacker can exploit this vulnerability to disclose sensitive information over the network. There is no impact on integrity or availability. The confidentiality impact is high, meaning sensitive data could be exposed. No known exploits are reported in the wild at this time.

An official fix is available from Microsoft. Users and administrators should apply the security updates provided by Microsoft for the affected Windows 10 versions to remediate this vulnerability. Refer to the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97817 for detailed patch information and update instructions.