Windows 10 Version 1607: Out-of-bounds read in Graphics Kernel
Summary
An out-of-bounds read in the Windows Graphics Kernel of Windows 10 Version 1607 allows an authorized local attacker to elevate privileges. The attacker needs local access and low privileges, such as an existing user session, and no user interaction is required. The CVSS 3.1 base score is 7.8 (High), and no active exploitation is known. Microsoft's release-health page states that this release has reached end of updates, so the availability of further security updates must be confirmed.
Affected
- Microsoft Windows 10 Version 1607, builds 10.0.14393.0 to before 10.0.14393.9612
- Scope to be confirmed: the CNA record also lists other Windows 10, Windows 11 and Windows Server versions, while the NVD CPE lists only Windows 10 Version 1607.
Fixed in
- October 2026 cumulative update KB5126868 (OS build 14393.9612), according to third-party data; not yet verified on the MSRC page
- Non-security update KB5134123 (OS build 14393.9615) includes the KB5126868 content
Workaround
Unknown. No vendor workaround identified; patching is the fix.
Exploitation
- Not listed in CISA KEV.
- CISA SSVC: exploitation none, automatable no, technical impact total.
- EPSS 0.00318 (below 1%).
- No public proof of concept found in searches; this does not rule one out.
Our recommendation
- Inventory all Windows 10 Version 1607 and Windows Server 2016 hosts, including unmanaged devices.
- Verify the fixed build on the MSRC page, then test KB5126868 or KB5134123 on a pilot group before rollout, including the known issues of the October update.
- Plan migration off Version 1607 or confirm an Extended Security Updates option, since future kernel flaws will remain unpatched.
- Until patched, restrict local logons and administrative rights on affected machines.
Information from Microsoft (Patch Tuesday October 2026)
- Severity (Microsoft)
- Important
- Impact
- Elevation of privilege – Windows Graphics Kernel
- Status on Patch Tuesday
- Neither exploited nor publicly disclosed
- Exploitability assessment
- Exploitation less likely
- Product family
- Windows, Windows ESU (Extended Security Updates)
- Updates (KB)
- KB5126835, KB5126836, KB5126868, KB5126651, KB5126657, KB5126655
Public exploits
PoC-in-GitHub, Metasploit and Exploit-DB list nothing for this CVE.
Research sources
- Microsoft Security Update Guide: CVE-2026-96118 msrc.microsoft.com
- Microsoft Release Health: Windows 10 1607 and Server 2016 learn.microsoft.com
- Microsoft Support: KB5134123 Windows 10 1607 update support.microsoft.com
- Microsoft Update Catalog: Windows 10 1607 www.catalog.update.microsoft.com
- OpenCVE: CVE-2026-96118 app.opencve.io
- Vulners VulnCheck record: CVE-2026-96118 vulners.com
- Strix: CVE-2026-96118 www.strix.ai
- Quest KACE: Microsoft Patch Tuesday October 2026 changelog.kace.com
Researched and written up in English and German by an AI (Claude by Anthropic) based on NVD, CISA, EPSS and the sources listed. The vendor information is authoritative. Researched on 2 Nov 2026, 01:04.
Original description (NVD)
Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
NVD references (1)
Sources
The tracker combines official, freely usable data sources – updated continuously:
- NVD (NIST) – CVEs, rating (CVSS), affected products
- CISA KEV – vulnerabilities confirmed by CISA as actively exploited
- CISA Vulnrichment – CISA assessment (SSVC) in the official CVE record
- FIRST EPSS – probability of exploitation
- Microsoft MSRC – Patch Tuesday: vulnerabilities, severity, updates
- PoC-in-GitHub – public proof-of-concept repositories
- Metasploit (Rapid7) – modules of the Metasploit Framework
- Exploit-DB (OffSec) – archive of public exploits (links only)
- Patch days: official vendor pages (linked per vendor) (Vendor patch days)
This product uses data from the NVD API but is not endorsed or certified by the NVD. EPSS data © FIRST.org.
Affected? We can help.
We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.