CVE-2026-96248
7.5HighPublished 13 Oct 2026 · NVD status: Analyzed · AI triage by gemini-3.8-flash
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
- Impact
- High impact on availability
- Weakness
- CWE-121
Impact
Remote, unauthenticated attackers can crash the Windows Host Guardian Service over the network, causing a denial of service. They do not need prior access or user interaction.
Root cause
A stack-based buffer overflow flaw exists in the service handling network input.
Affected systems
Versions not listed — check the vendor advisory.
CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Fix & remediation
Install the security update from the vendor advisory for your Windows Server version, or restrict network access to the Host Guardian Service ports via firewall if patching must wait.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
Stack-based buffer overflow in Windows Host Guardian Service allows an unauthorized attacker to deny service over a network.
References
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96248PatchVendor Advisory