CVE-2026-65679
HighCVSS 8.1Exploitation Probability (EPSS)
Low risk43th percentile - higher than 43% of all known CVEs
Summary
Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network.
Risk Assessment
An unauthorized attacker could remotely exploit the buffer overflow to execute code, potentially leading to full system compromise.
Recommendation
Apply the latest security updates from Microsoft for Windows iSCSI Target Service.
Other vulnerabilities in Windows iSCSI Target Service
See all- CVE-2026-65791Critical
A heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network.
- CVE-2026-69839Medium
Uncaught exception in Windows iSCSI Target Service allows an authorized attacker to deny service over a network.
- CVE-2026-65796High
Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network.
- CVE-2026-65681High
Null pointer dereference in Windows iSCSI Target Service allows an unauthorized attacker to deny service over a network.
Original NVD description (English source)
Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS