{"id":"CVE-2026-97816","published":"2026-10-13T19:22:20.110","lastModified":"2026-10-16T17:18:06.077","description":"Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-416"],"vendors":["microsoft"],"products":["windows 10 1809","windows 10 21h2","windows 10 22h2","windows 11 23h2","windows 11 24h2","windows 11 25h2","windows 11 26h1","windows 11 26h2","windows server 2019","windows server 2022","windows server 2025"],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97816","tags":["Patch","Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A use-after-free vulnerability in OpenSSH for Windows allows remote attackers to execute arbitrary code with high privileges. This critical flaw occurs when freed memory is accessed after being deallocated, potentially leading to remote code execution.","exploitability":"Exploitation is relatively straightforward requiring only network access to the vulnerable OpenSSH service, with no authentication required for the initial exploit.","blast_radius":"The impact could be severe across Windows environments running vulnerable OpenSSH versions, potentially allowing attackers to gain full system compromise on affected servers.","remediation":"Upgrade to OpenSSH for Windows version 9.8p1 or later immediately, as this release contains the fix for CVE-2026-97816.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","windows","ssh","remote"],"model":"garnet-coder","analyzedAt":"2026-10-14T08:52:29.917Z"}}