CVE-2026-96864

9.8Critical

Published 13 Oct 2026 · NVD status: Undergoing Analysis · AI triage by gemini-3.8-flash

9.8Critical

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: None
Impact: Full C/I/A compromise
Weakness: CWE-415

Impact

Unauthenticated attackers can execute arbitrary code over the network on Windows nodes running the Failover Cluster Virtual Driver. They only need network connectivity to the vulnerable cluster service without requiring credentials.

Root cause

A double-free flaw in the Microsoft Failover Cluster Virtual Driver allows memory corruption during network packet processing.

Affected systems

Versions not listed — check the vendor advisory.

CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Fix & remediation

Install the relevant Microsoft security update referenced in advisory CVE-2026-96864 immediately. If patching must wait, isolate cluster communication networks and restrict inbound access to cluster ports using host or perimeter firewalls.

shell

$ Get-HotFix -Id KB*

AI-suggested. Run it in staging first and check it against the vendor advisory. Why?

Ad · In-content banner

NVD description

Double free in Microsoft Failover Cluster Virtual Driver allows an unauthorized attacker to execute code over a network.

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96864

Source: nvd.nist.gov/vuln/detail/CVE-2026-96864