CVE-2026-96864

Summary

A double free vulnerability in Microsoft Failover Cluster Virtual Driver allows unauthenticated remote code execution, where an attacker can free the same memory block twice, leading to potential arbitrary code execution with high privileges.

Exploitability

Exploitation is likely straightforward for a remote attacker with no authentication requirements, requiring only network access to the affected cluster service.

Blast radius

The impact could be severe across enterprise environments using Microsoft Failover Clusters, potentially allowing attackers to gain full control over cluster nodes and compromise entire clustered systems.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Apply the latest Windows Server Update Services (WSUS) patches or manually install the specific security update KB5042876 for Windows Server 2019 and Windows Server 2022, as this vulnerability affects the Failover Cluster Virtual Driver component.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.