Windows 10 Version 1607: Heap-based buffer overflow in USB video driver
Summary
A heap-based buffer overflow in the Windows USB Video Driver allows an authorized local user to elevate privileges to SYSTEM. The CNA record lists several Windows client and server versions as affected; this entry focuses on Windows 10 Version 1607, which is the product in the NVD CPE match. An attacker needs local access and low privileges, for example through a phished or compromised user account, so this is not an internet-facing, unauthenticated risk.
Affected
- Windows 10 Version 1607 (10.0.14393.0 to below 10.0.14393.9612)
- Windows Server 2016 (10.0.14393.0 to below 10.0.14393.9612)
- Other affected versions per the CNA record: Windows 10 1809, 21H2, 22H2, Windows 11 23H2, 24H2, 25H2, 26H1, 26H2, Windows Server 2012 and 2012 R2
Fixed in
- Windows 10 Version 1607: build 10.0.14393.9612 or later (per third-party mirrors; verify on the MSRC page)
- KB number for Version 1607: Unknown.
Workaround
Unknown. No workaround or mitigation was found in the consulted sources. Check the MSRC advisory.
Exploitation
- Not publicly disclosed and not known to be exploited (per Microsoft).
- Microsoft exploitability assessment: Exploitation Less Likely.
- CISA SSVC: exploitation none, automatable no.
- EPSS about 0.003 (very low predicted exploitation probability).
- No public proof of concept found.
Our recommendation
- Identify all Windows 10 1607 endpoints and Windows Server 2016 systems and check their build with winver or systeminfo.
- Install the Microsoft update that provides build 10.0.14393.9612 or later, using the download links on the MSRC page.
- Replace systems that cannot be patched, and plan an upgrade of any unsupported Windows version.
- Review endpoints that use webcams or kiosk functions, as they use the USB video driver.
- Monitor for unusual local privilege escalation activity on affected systems.
Information from Microsoft (Patch Tuesday October 2026)
- Severity (Microsoft)
- Important
- Impact
- Elevation of privilege – Windows USB Video Driver
- Status on Patch Tuesday
- Neither exploited nor publicly disclosed
- Exploitability assessment
- Exploitation less likely
- Product family
- Windows, Windows ESU (Extended Security Updates)
- Updates (KB)
- KB5126651, KB5126655, KB5126657, KB5126646, KB5127648, KB5126653
Public exploits
PoC-in-GitHub, Metasploit and Exploit-DB list nothing for this CVE.
Research sources
- MSRC Security Update Guide (CVE-2026-85341) msrc.microsoft.com
- MSRC advisory (en-US) msrc.microsoft.com
- OpenCVE (affected range, CISA SSVC) app.opencve.io
- Vulners NVD mirror vulners.com
- Vulners Rapid7 (EPSS) vulners.com
- Vulners MSCVE (Server 2016 cross-check) vulners.com
Researched and written up in English and German by an AI (Claude by Anthropic) based on NVD, CISA, EPSS and the sources listed. The vendor information is authoritative. Researched on 2 Nov 2026, 02:24.
Original description (NVD)
Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.
NVD references (1)
Sources
The tracker combines official, freely usable data sources – updated continuously:
- NVD (NIST) – CVEs, rating (CVSS), affected products
- CISA KEV – vulnerabilities confirmed by CISA as actively exploited
- CISA Vulnrichment – CISA assessment (SSVC) in the official CVE record
- FIRST EPSS – probability of exploitation
- Microsoft MSRC – Patch Tuesday: vulnerabilities, severity, updates
- PoC-in-GitHub – public proof-of-concept repositories
- Metasploit (Rapid7) – modules of the Metasploit Framework
- Exploit-DB (OffSec) – archive of public exploits (links only)
- Patch days: official vendor pages (linked per vendor) (Vendor patch days)
This product uses data from the NVD API but is not endorsed or certified by the NVD. EPSS data © FIRST.org.
Affected? We can help.
We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.