Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.
Critical 9.8Patch available
CVE-2026-69883
Microsoft Windows 10 1607 — use-after-free.
Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.
WeaknessCWE-416: Use-after-free
Published Updated Source NVD
CVSS 3.1
9.8
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploit chance, 30 days
0.9%
Higher than 61% of all CVEs (EPSS)
Status
No known exploitation
Not in CISA KEV
Patch
Available
See the vendor advisory
What happened
What to do
- 01Check whether you run Microsoft Windows 10 1607, and which version.
- 02Install the fixed version listed in the vendor advisory.
References
Timeline · UTC
- Published to NVD
- NVD record updated
Also actively exploited
Other CVEs in Microsoft Windows 10 1607
39 more CVEs
9.8Microsoft Windows 10 1607 — buffer overflow.EPSS 1.1%9.8Microsoft Windows 10 1607 — buffer overflow.EPSS 0.9%9.8Microsoft Windows 10 1607 — improper input validation.EPSS 1.1%9.8Microsoft Windows 10 1607 — use-after-free.EPSS 0.9%9.8Microsoft Windows 10 1607 — Untrusted pointer dereference in Windows OLE allows an unauthorized attacker to execute code over…EPSS 1.0%9.8Microsoft Windows 10 1607 — Double free in Microsoft Failover Cluster Virtual Driver allows an unauthorized attacker to…EPSS 0.6%