Executive brief
Windows Failover Cluster is a core component of Windows Server that enables high availability by allowing multiple servers to work together as a single cluster. A use-after-free vulnerability in this component allows an unauthenticated attacker to execute arbitrary code remotely across the network, potentially compromising the availability and security of critical server infrastructure.
Technical details
This is a use-after-free memory corruption vulnerability in Windows Failover Cluster that allows network-based code execution without authentication. The vulnerability exists in memory management within the cluster service, allowing an attacker to craft a specially-formed network request that causes the service to access freed memory and execute attacker-controlled code. The flaw is exploitable over the network without requiring prior authentication or user interaction, making it a high-risk remote code execution vector for systems running Windows Failover Cluster.
Affected products
- Microsoft Windows Failover Cluster
Timeline
- 2026-09-08: disclosed