CVE-2026-71338
MediumCVSS 6.4Exploitation Probability (EPSS)
Low risk18th percentile - higher than 18% of all known CVEs
Summary
Double free in Windows Failover Cluster allows an authorized attacker to elevate privileges locally.
Risk Assessment
Privilege escalation could lead to system compromise, posing a serious security risk.
Recommendation
Apply Windows security updates that fix this flaw.
Other vulnerabilities in Windows Failover Cluster
See all- CVE-2026-73010Critical
Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.
- CVE-2026-78444High
Untrusted pointer dereference in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.
- CVE-2026-72989High
Use of uninitialized resource in Windows Failover Cluster allows an unauthorized attacker to disclose information over a network.
Original NVD description (English source)
Double free in Windows Failover Cluster allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS