CVE-2026-65681
HighCVSS 7.5Exploitation Probability (EPSS)
Elevated risk55th percentile - higher than 55% of all known CVEs
Summary
Null pointer dereference in Windows iSCSI Target Service allows an unauthorized attacker to deny service over a network.
Risk Assessment
An unauthorized attacker could remotely cause a service crash, potentially leading to disruption of systems relying on iSCSI.
Recommendation
Apply the latest security updates from Microsoft for Windows iSCSI Target Service.
Other vulnerabilities in Windows iSCSI Target Service
See all- CVE-2026-65791Critical
A heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network.
- CVE-2026-69839Medium
Uncaught exception in Windows iSCSI Target Service allows an authorized attacker to deny service over a network.
- CVE-2026-65796High
Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network.
- CVE-2026-65679High
Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network.
Original NVD description (English source)
Null pointer dereference in Windows iSCSI Target Service allows an unauthorized attacker to deny service over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS