CVE-2026-78444 – Microsoft Failover Cluster Remote Code Execution Vulnerability
CVSS 8.1
IMPORTANT
Critical - Same Day Deployment
“A single crafted network packet could turn a race condition into remote code execution, with no authentication or user action required.”
CVE-2026-78444 is a critical remote code execution vulnerability in Microsoft Windows Failover Cluster. The issue is caused by an untrusted pointer dereference. An unauthenticated attacker could send a specially crafted packet to an affected service over the network and, after successfully winning a race condition, execute code on the target system. The vulnerability is not publicly disclosed and is not known to be exploited.
Key Details
- Attack Vector
- Network
- Attack Complexity
- High
- Privileges Required
- None
- User Interaction
- None
- CWE Classification
- CWE-822
Patch this CVE on all your endpoints in under 5 minutes.
First 200 endpoints are free forever, scale as needed.