Heap-based Buffer Overflow in Windows iSCSI Target Service by Microsoft
CVE-2026-65796

5.9MEDIUM

Key Information:

Vendor

Microsoft
Status
Windows 10 Version 1607
Windows 10 Version 1809
Windows Server 2012
Windows Server 2012 (server Core Installation)
Vendor
CVE Published:
11 August 2026

What is CVE-2026-65796?

A buffer overflow vulnerability exists in the Windows iSCSI Target Service, which could be exploited by an unauthorized attacker to execute a denial of service attack. This flaw allows the attacker to disrupt service over the network, potentially impacting system availability and performance. Organizations using the affected service should assess their exposure and apply recommended security patches to mitigate the risk.

Affected Version(s)

Windows 10 Version 1607 32-bit Systems 10.0.14393.0 < 10.0.14393.9418

Windows 10 Version 1809 32-bit Systems 10.0.17763.0 < 10.0.17763.9115

Windows Server 2012 (Server Core installation) x64-based Systems 6.2.9200.0 < 6.2.9200.26279

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisorypatch

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.