CVE-2026-102192
HighCVSS 7.5Exploitation Probability (EPSS)
Elevated risk66th percentile - higher than 66% of all known CVEs
Summary
An integer underflow (wrap or wraparound) vulnerability in Windows Failover Cluster allows an unauthorized attacker to deny service over a network.
Risk Assessment
An unauthenticated attacker could remotely cause the failover cluster to become unavailable, potentially disrupting critical high-availability services in the organization.
Recommendation
Immediately deploy security updates for Windows Failover Cluster and restrict network access to cluster services from untrusted network segments.
Other vulnerabilities in Windows Failover Cluster
See all- CVE-2026-88102Critical
Use-after-free vulnerability in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.
- CVE-2026-73010Critical
Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.
- CVE-2026-96945High
Uncaught exception in Windows Failover Cluster allows an unauthorized attacker to deny service over a network.
- CVE-2026-88099Medium
Uncaught exception in Windows Failover Cluster allows an unauthorized attacker to deny service over a network.
- CVE-2026-78444High
Untrusted pointer dereference in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.
- CVE-2026-72989High
Use of uninitialized resource in Windows Failover Cluster allows an unauthorized attacker to disclose information over a network.
- CVE-2026-71338Medium
Double free in Windows Failover Cluster allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Integer underflow (wrap or wraparound) in Windows Failover Cluster allows an unauthorized attacker to deny service over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS