{"id":"CVE-2026-69883","published":"2026-10-13T19:19:01.150","lastModified":"2026-10-16T16:20:07.070","description":"Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-416"],"vendors":[],"products":[],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69883","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A use-after-free vulnerability in Windows iSCSI allows remote attackers to execute arbitrary code with high privileges. This flaw occurs when freed memory is accessed after being deallocated, potentially leading to remote code execution.","exploitability":"Exploitation is likely straightforward for remote attackers with minimal preconditions, requiring only network access to the vulnerable iSCSI service.","blast_radius":"If exploited, this vulnerability could impact any Windows system running iSCSI services, potentially allowing attackers to gain full system compromise across enterprise networks.","remediation":"Apply the latest Windows updates including KB5042783 or later patches for iSCSI functionality.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","iscsi","network"],"model":"garnet-coder","analyzedAt":"2026-10-14T08:48:02.973Z"}}