CVE-2026-96945

HIGH CVSS 3.1: 7.5 EPSS 1.05%
Updated Oct 16, 2026
Microsoft
Parameter Value
CVSS 7.5 (HIGH)
Affected Versions before 10.0.26100.33650
Fixed In 10.0.17763.9376
Type CWE-248 (Uncaught Exception)
Vendor Microsoft
Public PoC No

Uncaught exception in Windows Failover Cluster allows an unauthorized attacker to deny service over a network.

Attack Parameters

Attack Vector
Network
Can be exploited remotely
Attack Complexity
Low
Easy to exploit
Privileges Required
None
No privileges needed
User Interaction
None
No user interaction needed

Impact Assessment

Confidentiality
None
No data leak
Integrity
None
No data modification
Availability
High
Complete denial of service

CVSS Vector v3.1

Weakness Type (CWE)

Vulnerable Products 3

Configuration From (including) Up to (excluding)
Microsoft Windows_Server_2019
cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*
— 10.0.17763.9376
Microsoft Windows_Server_2022
cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*
— 10.0.20348.5761
Microsoft Windows_Server_2025
cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:x64:*
— 10.0.26100.33650