CVE-2026-88234

EUVD-2026-121536
Release of invalid pointer or reference in Windows iSCSI allows an unauthorized attacker to execute code over a network.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Windows Releases
Platform
Version
Windows Server 2016
Server Core
KB5131291
Standard
KB5131291
Windows Server 2019
Server Core
KB5131085
Standard
KB5131085
Windows Server 2022
Server Core
KB5131090
Standard
KB5131090
Windows Server 2025
Server Core
KB5131080
Standard
KB5131080
Common Weakness Enumeration
Vulnerability Media Exposure
References
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88234