Vulnerabilities
Windows iSCSI Out-of-Bounds Read Enables Local Information Disclosure (CVE‑2026‑69721)
Microsoft disclosed an out-of-bounds read flaw in the Windows iSCSI Initiator service that lets local users with sufficient privileges read sensitive memory. The vulnerability affects all Windows systems running iSCSI and can expose credentials or keys. Defenders should patch immediately, disable iSCSI if unused, and limit local privileges.
What happened
Microsoft identified an out‑of‑bounds read flaw in the Windows iSCSI Initiator service. The bug allows a local user with sufficient privileges to read memory beyond intended bounds, exposing sensitive data stored in the iSCSI context.
Affected systems
All Windows 10/11 and Windows Server editions that have the iSCSI Initiator service enabled are potentially vulnerable. Systems that do not use iSCSI are not impacted.
Impact
Local attackers can retrieve confidential information such as credentials, encryption keys, or other memory contents. The vulnerability does not provide remote code execution but can aid in lateral movement or privilege escalation.
Mitigation
- Apply the latest cumulative update for Windows (KBxxxxxx) that addresses CVE‑2026‑69721.
- Disable the iSCSI Initiator service if the feature is not required.
- Restrict local account privileges to the minimum necessary for iSCSI operations.
- Monitor for anomalous memory access patterns and audit iSCSI logs.
Related vulnerabilities
CVE-2026-70063: Local Windows Kernel Information Disclosure Vulnerability
Microsoft has identified CVE-2026-70063, an out‑of‑bounds read in the Windows kernel that permits a local, authorized attacker to read sensitive memory. The flaw is fixed in the latest cumulative update for Windows 10, Windows 11, and Windows Server 2022. Defenders should verify that the update is installed and monitor for any anomalous local privilege activity.
Read briefing
CVE-2026-69967: Windows Overlay Filter Out‑of‑Bounds Read Enables Local Information Disclosure
Microsoft identified an out‑of‑bounds read in the Windows Overlay Filter that allows a local user to read protected memory. The flaw exists in Windows 10 and 11 and is fixed by the latest cumulative update. Administrators should apply the patch and verify service configuration immediately.
Read briefing
CVE-2026-83671: Windows Hyper‑V Out‑of‑Bounds Read Enables Local Information Disclosure
A local attacker can exploit an out‑of‑bounds read in Windows Hyper‑V to read arbitrary memory, exposing sensitive data. The flaw is CVE‑2026‑83671 and is mitigated by applying the latest Windows update or disabling Hyper‑V on non‑essential systems.
Read briefing
CVE-2026-108462: Windows Kernel Information Disclosure Vulnerability
Microsoft has identified a Windows kernel information disclosure flaw (CVE‑2026‑108462) that permits local attackers with elevated privileges to read sensitive system data. The issue is fixed in the latest security update; administrators should apply the patch immediately and verify that kernel memory is protected.
Read briefing