CVE Catalog

CVE-2026-70095

HighCVSS 7.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.57%

46th percentile - higher than 46% of all known CVEs

Summary

Heap-based buffer overflow in Windows iSCSI. An unauthorized attacker can execute code over a network.

Risk Assessment

Very high risk — unauthenticated remote code execution can lead to full server compromise and lateral movement across the network.

Recommendation

Immediately install Microsoft patches for Windows iSCSI and consider restricting iSCSI service access at the firewall level.

Other vulnerabilities in Windows iSCSI

See all
Original NVD description (English source)

Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS