CVE-2026-88102
CriticalCVSS 9.8Summary
Use-after-free vulnerability in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.
Risk Assessment
An attacker could exploit this vulnerability to take control of the cluster, potentially disrupting service availability and compromising data.
Recommendation
Apply Windows updates from Microsoft to remediate this vulnerability.
Other vulnerabilities in Windows Failover Cluster
See all- CVE-2026-73010Critical
Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.
- CVE-2026-78444High
Untrusted pointer dereference in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.
- CVE-2026-72989High
Use of uninitialized resource in Windows Failover Cluster allows an unauthorized attacker to disclose information over a network.
- CVE-2026-71338Medium
Double free in Windows Failover Cluster allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS