CVE-2026-78444

Analyzed Analyzed - Analysis Complete

Untrusted Pointer Dereference in Windows Failover Cluster

Publication date: 2026-09-08

Last updated on: 2026-09-11

Assigner: Microsoft Corporation

Description

Untrusted pointer dereference in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-08

Last Modified

2026-09-11

Generated

2026-09-29

AI Q&A

2026-09-10

EPSS Evaluated

2026-09-27

NVD

CVE-2026-78444

Affected Vendors & Products

Vendor	Product	Version / Range
microsoft	windows_server_2025	to 10.0.26100.33438 (exc)
microsoft	windows_10_1809	to 10.0.17763.9245 (exc)
microsoft	windows_10_1809	to 10.0.17763.9245 (exc)
microsoft	windows_server_2019	to 10.0.17763.9245 (exc)
microsoft	windows_server_2022	to 10.0.20348.5622 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-822	The product obtains a value from an untrusted source, converts this value to a pointer, and dereferences the resulting pointer.

Attack-Flow Graph

Executive Summary

This vulnerability involves an untrusted pointer dereference in Windows Failover Cluster. An attacker can exploit this to execute arbitrary code over a network without authentication.

Impact Analysis

An attacker could gain control of the system, leading to data breaches, system compromise, or disruption of services relying on the Windows Failover Cluster.

Compliance Impact

This vulnerability could lead to unauthorized access, violating data protection requirements in GDPR and HIPAA, potentially resulting in legal penalties and loss of compliance certifications.

Mitigation Strategies

Apply the latest security updates from Microsoft for Windows Failover Cluster. Isolate affected systems from untrusted networks. Monitor network traffic for suspicious activity targeting cluster services.

Hi! I’m here to help you understand CVE-2026-78444. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70