{"id":"CVE-2026-88102","published":"2026-10-13T19:21:28.217","lastModified":"2026-10-16T15:42:02.130","description":"Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-416"],"vendors":["microsoft"],"products":["windows server 2019","windows server 2022","windows server 2025"],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88102","tags":["Patch","Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A use-after-free vulnerability in Windows Failover Cluster allows unauthorized remote code execution when an attacker sends specially crafted network requests to a cluster node. This flaw can be exploited by any unauthenticated user over the network.","exploitability":"Exploitation is likely straightforward for network-based attackers with minimal preconditions, requiring only the ability to send crafted packets to vulnerable cluster nodes.","blast_radius":"The impact could be severe across enterprise environments that use Windows Failover Clusters, potentially allowing attackers to gain full control over affected cluster nodes and compromise entire cluster resources.","remediation":"Apply the latest Windows updates containing the fix for CVE-2026-88102, specifically the August 2026 security updates for Windows Server 2019, Windows Server 2022, and Windows Server 2025.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","cluster","windows","network"],"model":"garnet-coder","analyzedAt":"2026-10-14T08:50:44.825Z"}}