CVE-2026-71338

Published: Sep 8, 2026Modified: Sep 8, 2026

6.4

Vector

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability: 0.5 / Impact: 5.9

Source: secure@microsoft.com

Description

Double free in Windows Failover Cluster allows an authorized attacker to elevate privileges locally.

Related CWEs

The product calls free() twice on the same memory address, potentially leading to modification of unexpected memory locations.

References (1)

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71338

Source: secure@microsoft.com

Timeline

No history available yet.