CVE-2026-69634
CriticalCVSS 9.8Summary
Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network.
Risk Assessment
An attacker can remotely execute code on the system, potentially leading to full system compromise or lateral movement.
Recommendation
Apply the latest security updates from Microsoft for the iSCSI service.
Other vulnerabilities in Windows iSCSI
See all- CVE-2026-69883Critical
Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.
- CVE-2026-69705Critical
Out-of-bounds write in Windows iSCSI allows an unauthorized attacker to execute code over a network.
- CVE-2026-73025Critical
Weak authentication in Windows iSCSI allows an unauthorized attacker to bypass a security feature over a network.
- CVE-2026-69628High
Heap-based buffer overflow in Windows iSCSI allows an authorized attacker to execute code over a network.
- CVE-2026-69598High
Incorrect calculation of buffer size in Windows iSCSI allows an unauthorized attacker to execute code over a network.
- CVE-2026-68898Medium
A vulnerability in Windows iSCSI causes an out-of-bounds read, allowing an unauthorized attacker to deny service over a network.
Original NVD description (English source)
Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS