Heap-based Buffer Overflow in Windows Kernel by Microsoft
CVE-2026-70106

7.8HIGH

Key Information:

Vendor

Microsoft
Status
Microsoft Office 365 For Mac
Windows 10 Version 1607
Windows 10 Version 1809
Windows 10 Version 21h2
Vendor
CVE Published:
13 October 2026

What is CVE-2026-70106?

A heap-based buffer overflow vulnerability exists in the Windows Kernel, which allows an authorized attacker to elevate privileges locally. This flaw can be exploited to gain unauthorized access and control over a system, potentially leading to unauthorized actions and breaches of sensitive data. Timely patching is essential to mitigate the risks associated with this security issue.

Affected Version(s)

Microsoft Office 365 for Mac 1.0.0 < 16.114.26101123

Windows 10 Version 1607 32-bit Systems 10.0.14393.0 < 10.0.14393.9612

Windows 10 Version 1809 32-bit Systems 10.0.17763.0 < 10.0.17763.9376

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisorypatch

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.