EUVD-2026-73060

Uncaught exception in Windows iSCSI Target Service allows an authorized attacker to deny service over a network...

CVE-2026-69839

CVE-2026-69839 is a denial-of-service vulnerability in the Windows iSCSI Target Service , caused by an uncaught exception that allows an authorized attacker (low privileges) to deny service over the network. The CVSS v3.1 score is 6.5 (Medium) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H,...

EUVD-2026-73034

Heap-based buffer overflow in Windows iSCSI allows an authorized attacker to execute code over a network...

CVE-2026-69628

CVE-2026-69628 is a heap-based buffer overflow in Windows iSCSI that allows an authorized attacker to achieve remote code execution over a network. The Microsoft-assigned CVSS 3.1 score is 8.8 (HIGH) , reflecting a network attack vector, low complexity, low privileges required, no user interactio...

Windows iSCSI Remote Code Execution Vulnerability

Incorrect calculation of buffer size in Windows iSCSI allows an unauthorized attacker to execute code over a network...

Windows iSCSI Target Service Denial of Service Vulnerability

Uncaught exception in Windows iSCSI Target Service allows an authorized attacker to deny service over a network...

Windows iSCSI Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows iSCSI allows an authorized attacker to execute code over a network...

Windows iSCSI Security Feature Bypass Vulnerability

Weak authentication in Windows iSCSI allows an unauthorized attacker to bypass a security feature over a network...

Windows iSCSI Denial of Service Vulnerability

Out-of-bounds read in Windows iSCSI allows an unauthorized attacker to deny service over a network...

kernel: scsi: target: iscsi: Validate CHAP_R length before base64 decode

A flaw was found in the Linux kernel's iSCSI target functionality. This vulnerability allows a remote attacker to cause a buffer overflow by sending a specially crafted Challenge-Handshake Authentication Authentication Protocol CHAP response. The system fails to validate the length of the...

CVE-2026-69598: Incorrect Calculation of Buffer Size

Incorrect calculation of buffer size in Windows iSCSI allows an unauthorized attacker to execute code over a network...

kernel security, bug fix, and enhancement update

5.14.0-687.44.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...

PT-2026-87600

Name of the Vulnerable Software and Affected Versions Windows iSCSI affected versions not specified Description An incorrect calculation of buffer size in Windows iSCSI allows an unauthorized attacker to execute arbitrary code over a network, which can affect the system. Recommendations At the...

PT-2026-87629

Name of the Vulnerable Software and Affected Versions Windows iSCSI affected versions not specified Description A heap-based buffer overflow occurs in Windows iSCSI, which allows an authorized attacker to execute arbitrary code over a network and affect the system. A heap-based buffer overflow is...

PT-2026-87312

Name of the Vulnerable Software and Affected Versions Windows iSCSI affected versions not specified Description An out-of-bounds read occurs in Windows iSCSI, which allows an unauthorized attacker to cause a denial-of-service condition over a network. An out-of-bounds read is a type of memory...

CVE-2026-73025: Weak Authentication

Weak authentication in Windows iSCSI allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-69628: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows iSCSI allows an authorized attacker to execute code over a network...

CVE-2026-69839: Uncaught Exception

Uncaught exception in Windows iSCSI Target Service allows an authorized attacker to deny service over a network...

PT-2026-87752

Uncaught exception in Windows iSCSI Target Service allows an authorized attacker to deny service over a network...

PT-2026-87309

Name of the Vulnerable Software and Affected Versions Internet Storage Name Service affected versions not specified Description A numeric truncation error occurs in the Internet Storage Name Service, which allows an authorized attacker to disclose information locally. Recommendations At the momen...