CVE-2026-70170

Awaiting Analysis Awaiting Analysis - Queue

Untrusted Pointer Dereference in Windows Kernel

Publication date: 2026-10-13

Last updated on: 2026-10-22

Assigner: Microsoft Corporation

Description

Untrusted pointer dereference in Windows Kernel allows an authorized attacker to deny service over a network.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-13

Last Modified

2026-10-22

Generated

2026-11-08

AI Q&A

2026-10-14

EPSS Evaluated

2026-11-07

NVD

CVE-2026-70170

EUVD

EUVD-2026-99605

Affected Vendors & Products

Vendor	Product	Version / Range
microsoft	windows_server_2012	r2
microsoft	windows_server_2012	*
microsoft	windows_10_1607	to 10.0.14393.9612 (exc)
microsoft	windows_10_1607	to 10.0.14393.9612 (exc)
microsoft	windows_10_1809	to 10.0.17763.9376 (exc)
microsoft	windows_10_1809	to 10.0.17763.9376 (exc)
microsoft	windows_10_21h2	to 10.0.19044.7807 (exc)
microsoft	windows_10_21h2	to 10.0.19044.7807 (exc)
microsoft	windows_10_21h2	to 10.0.19044.7807 (exc)
microsoft	windows_11_23h2	to 10.0.22631.7652 (exc)
microsoft	windows_11_23h2	to 10.0.22631.7652 (exc)
microsoft	windows_11_24h2	to 10.0.26100.9711 (exc)
microsoft	windows_11_24h2	to 10.0.26100.9711 (exc)
microsoft	windows_11_25h2	to 10.0.26200.9711 (exc)
microsoft	windows_11_25h2	to 10.0.26200.9711 (exc)
microsoft	windows_11_26h1	to 10.0.28000.3231 (exc)
microsoft	windows_11_26h1	to 10.0.28000.3231 (exc)
microsoft	windows_11_26h2	to 10.0.26300.9711 (exc)
microsoft	windows_11_26h2	to 10.0.26300.9711 (exc)
microsoft	windows_server_2025	to 10.0.26100.33650 (exc)
microsoft	windows_server_2022	to 10.0.20348.5761 (exc)
microsoft	windows_server_2016	to 10.0.14393.9612 (exc)
microsoft	windows_server_2019	to 10.0.17763.9376 (exc)
microsoft	windows_10_22h2	to 10.0.19045.7807 (exc)
microsoft	windows_10_22h2	to 10.0.19045.7807 (exc)
microsoft	windows_10_22h2	to 10.0.19045.7807 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-822	The product obtains a value from an untrusted source, converts this value to a pointer, and dereferences the resulting pointer.

Attack-Flow Graph

Executive Summary

This vulnerability involves an untrusted pointer dereference in the Windows Kernel. An authorized attacker could exploit this to cause a denial of service over a network by crashing the system.

Detection Guidance

This vulnerability involves an untrusted pointer dereference in the Windows Kernel leading to a denial of service. Detection typically requires monitoring for system crashes or hangs, especially after network interactions. Use Windows Event Viewer to check for kernel-related errors or system freezes. Commands like 'systeminfo' and 'sfc /scannow' can help identify system integrity issues. Network monitoring tools may detect unusual traffic patterns causing service disruption.

Impact Analysis

If exploited, this vulnerability could allow an attacker to disrupt services on affected Windows systems, leading to system crashes or unresponsiveness. This may cause downtime for users or organizations relying on these systems.

Compliance Impact

This vulnerability allows denial of service over a network, which could disrupt critical systems handling sensitive data. For GDPR, it may impact availability of personal data processing systems. For HIPAA, it could affect the integrity and availability of protected health information systems.

Mitigation Strategies

Apply the latest Windows security updates from Microsoft to patch the untrusted pointer dereference in the Windows Kernel. Monitor Microsoft's security advisories for updates and ensure all affected systems are updated promptly.

Hi! I’m here to help you understand CVE-2026-70170. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70

EPSS Chart

Security Radar

News mentioning this vulnerability

Loading related security news...