CVE-2026-78444
HighCVSS 8.1Exploitation Probability (EPSS)
Low risk42th percentile - higher than 42% of all known CVEs
Summary
Untrusted pointer dereference in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.
Risk Assessment
An unauthorized attacker could remotely execute code in the context of the service, potentially leading to cluster integrity compromise.
Recommendation
Apply the latest security updates for Windows.
Other vulnerabilities in Windows Failover Cluster
See all- CVE-2026-88102Critical
Use-after-free vulnerability in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.
- CVE-2026-73010Critical
Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.
- CVE-2026-96945High
Uncaught exception in Windows Failover Cluster allows an unauthorized attacker to deny service over a network.
- CVE-2026-88099Medium
Uncaught exception in Windows Failover Cluster allows an unauthorized attacker to deny service over a network.
- CVE-2026-102192High
An integer underflow (wrap or wraparound) vulnerability in Windows Failover Cluster allows an unauthorized attacker to deny service over a network.
- CVE-2026-72989High
Use of uninitialized resource in Windows Failover Cluster allows an unauthorized attacker to disclose information over a network.
- CVE-2026-71338Medium
Double free in Windows Failover Cluster allows an authorized attacker to elevate privileges locally.
- CVE-2025-47979Medium
Insertion of sensitive information into log file in Windows Failover Cluster allows an authorized attacker to disclose information locally.
Original NVD description (English source)
Untrusted pointer dereference in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS