CVE-2026-88099: medium-severity vulnerability in Microsoft Windows Server 2019
Windows Failover Cluster Denial of Service Vulnerability
Published
10Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 5.9
exploitation probability
—
observed exploitation
nono source reports it
Uncaught exception in Windows Failover Cluster allows an unauthorized attacker to deny service over a network.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
Affected products
Microsoft · Windows Server 2019Microsoft · Windows Server 2019 (Server Core installation)Microsoft · Windows Server 2022Microsoft · Windows Server 2025Microsoft · Windows Server 2025 (Server Core installation)Related CVEs — Microsoft Windows Server 2019
In the same product, most dangerous first.
CVE-2025-59287CRITICALWindows Server Update Service (WSUS) Remote Code Execution VulnerabilityEPSS 100.0%KEVCVE-2021-34527HIGHWindows Print Spooler Remote Code Execution VulnerabilityEPSS 99.8%KEVCVE-2024-21412HIGHInternet Shortcut Files Security Feature Bypass VulnerabilityEPSS 99.4%KEVCVE-2020-1472MEDIUMNetlogon Elevation of Privilege VulnerabilityEPSS 99.4%KEVCVE-2022-30190HIGHMicrosoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution VulnerabilityEPSS 99.2%KEVCVE-2023-36884HIGHWindows Search Remote Code Execution VulnerabilityEPSS 98.9%KEV