Out-of-Bounds Read in Windows iSCSI

Publication date: 2026-09-08

Last updated on: 2026-09-24

Assigner: Microsoft Corporation

Description

Out-of-bounds read in Windows iSCSI allows an unauthorized attacker to deny service over a network.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-08

Last Modified

2026-09-24

Generated

2026-09-29

AI Q&A

2026-09-09

EPSS Evaluated

2026-09-27

NVD

CVE-2026-68898

Affected Vendors & Products

Vendor	Product	Version / Range
microsoft	iscsi	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-125	The product reads data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This vulnerability is an out-of-bounds read issue in the Windows iSCSI component. It allows an unauthorized attacker to cause a denial of service over a network by exploiting this flaw.

Impact Analysis

An attacker could exploit this to disrupt network services relying on iSCSI, potentially causing service unavailability or crashes for systems using Windows iSCSI.

Mitigation Strategies

Apply the latest security updates from Microsoft to patch the Windows iSCSI out-of-bounds read vulnerability. Disable the iSCSI service if not in use and monitor network traffic for unusual activity targeting iSCSI ports.

Hi! I’m here to help you understand CVE-2026-68898. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70