CVE-2026-97822: CWE-125: Out-of-bounds Read in Microsoft Windows 10 Version 1607

This vulnerability, tracked as CVE-2026-97822 and categorized under CWE-125 (Out-of-bounds Read), affects multiple versions of Microsoft Windows 10 including Version 1607 and others as specified. It involves an out-of-bounds read in the DNS Server, which can be exploited by an authorized attacker to disclose information over a network. The CVSS v3.1 base score is 6.5, indicating medium severity, with an attack vector of network, low attack complexity, and requiring privileges but no user interaction. Microsoft has issued an official fix for this vulnerability.

An authorized attacker can exploit this vulnerability to disclose information over a network. There is no indication of impact on integrity or availability. No known exploits are reported in the wild at this time.

An official fix is available from Microsoft. Users and administrators should apply the security updates provided by Microsoft as detailed in the vendor advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97822 to remediate this vulnerability.