Windows iSCSI Target Service
by Microsoft
CVEs (12)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-65791 | Cri | 0.64 | 9.8 | 0.01 | Aug 11, 2026 | Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-65796 | Hig | 0.53 | 8.1 | 0.01 | Aug 11, 2026 | Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-65679 | Hig | 0.53 | 8.1 | 0.01 | Aug 11, 2026 | Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network. | ||
| CVE-2020-16980 | Hig | 0.51 | 7.8 | 0.01 | Oct 16, 2020 | An elevation of privilege vulnerability exists when the Windows iSCSI Target Service improperly handles file operations. An attacker who successfully exploited this vulnerability could gain elevated privileges. To exploit the vulnerability, an attacker would first need… | ||
| CVE-2020-1356 | Hig | 0.51 | 7.8 | 0.01 | Jul 14, 2020 | An elevation of privilege vulnerability exists when the Windows iSCSI Target Service improperly handles file operations, aka 'Windows iSCSI Target Service Elevation of Privilege Vulnerability'. | ||
| CVE-2026-65681 | Hig | 0.49 | 7.5 | 0.01 | Aug 11, 2026 | Null pointer dereference in Windows iSCSI Target Service allows an unauthorized attacker to deny service over a network. | ||
| CVE-2023-21811 | Hig | 0.49 | 7.5 | 0.02 | Feb 14, 2023 | Windows iSCSI Service Denial of Service Vulnerability | ||
| CVE-2023-21702 | Hig | 0.49 | 7.5 | 0.02 | Feb 14, 2023 | Windows iSCSI Service Denial of Service Vulnerability | ||
| CVE-2023-21527 | Hig | 0.49 | 7.5 | 0.02 | Jan 10, 2023 | Windows iSCSI Service Denial of Service Vulnerability | ||
| CVE-2026-69839 | Med | 0.42 | 6.5 | 0.01 | Sep 8, 2026 | Uncaught exception in Windows iSCSI Target Service allows an authorized attacker to deny service over a network. | ||
| CVE-2022-24498 | Med | 0.42 | 6.5 | 0.03 | Apr 15, 2022 | Windows iSCSI Target Service Information Disclosure Vulnerability | ||
| CVE-2023-24945 | Med | 0.36 | 5.5 | 0.01 | May 9, 2023 | Windows iSCSI Target Service Information Disclosure Vulnerability |
- risk 0.64cvss 9.8epss 0.01
Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network.
- risk 0.53cvss 8.1epss 0.01
Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network.
- risk 0.53cvss 8.1epss 0.01
Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network.
- risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when the Windows iSCSI Target Service improperly handles file operations. An attacker who successfully exploited this vulnerability could gain elevated privileges. To exploit the vulnerability, an attacker would first need…
- risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when the Windows iSCSI Target Service improperly handles file operations, aka 'Windows iSCSI Target Service Elevation of Privilege Vulnerability'.
- risk 0.49cvss 7.5epss 0.01
Null pointer dereference in Windows iSCSI Target Service allows an unauthorized attacker to deny service over a network.
- risk 0.49cvss 7.5epss 0.02
Windows iSCSI Service Denial of Service Vulnerability
- risk 0.49cvss 7.5epss 0.02
Windows iSCSI Service Denial of Service Vulnerability
- risk 0.49cvss 7.5epss 0.02
Windows iSCSI Service Denial of Service Vulnerability
- risk 0.42cvss 6.5epss 0.01
Uncaught exception in Windows iSCSI Target Service allows an authorized attacker to deny service over a network.
- risk 0.42cvss 6.5epss 0.03
Windows iSCSI Target Service Information Disclosure Vulnerability
- risk 0.36cvss 5.5epss 0.01
Windows iSCSI Target Service Information Disclosure Vulnerability