Windows Kernel Denial of Service Vulnerability
MonitorCVSS 5.3CVE-2026-108466Oct 13, 2026
Microsoft
IT in OT - Windows Server and Active Directory are widely deployed in OT environments
Attack path
Attack VectorNetwork
Auth RequiredNone
ComplexityHigh
User InteractionRequired
Summary
An out-of-bounds read vulnerability in the Windows Kernel allows an unauthenticated attacker to cause a denial of service by sending a specially crafted network packet. The vulnerability exists in Windows 10 (versions 1607, 1809, 21H2, 22H2), Windows 11 (versions 23H2, 24H2, 25H2, 26H2, 26H1), Windows Server 2016, Windows Server 2019, Windows Server 2022, and Windows Server 2025 across 32-bit, 64-bit, and ARM64-based systems.
What this means
What could happen
An attacker with network access could crash or hang a Windows-based HMI, engineering workstation, or SCADA server running vulnerable versions, causing loss of visibility and control until the system restarts.
Who's at risk
IT managers running Windows-based operator workstations, HMIs, SCADA servers, engineering consoles, or data historians in water, electric, or other utility systems should apply this patch. Any Windows 10, Windows 11, or Windows Server 2016/2019/2022/2025 system exposed to untrusted network access is at risk.
How it could be exploited
An attacker sends a specially crafted network packet to the vulnerable Windows kernel component. The kernel attempts to read memory beyond allocated bounds, triggering an exception that crashes or freezes the operating system. No user interaction or authentication is required.
Prerequisites
- Network access to the affected Windows system
- Target system must be running a vulnerable build of Windows 10, Windows 11, or Windows Server 2016, 2019, 2022, or 2025
remotely exploitableno authentication requiredlow complexityaffects Windows-based OT systems (HMI, SCADA, engineering workstations)
Exploitability
Unlikely to be exploited — EPSS score 0.6%
Affected products (28)
28 with fix
ProductAffected VersionsFix Status
Remediation & Mitigation
0/1
Schedule — requires maintenance window
0/1Patching may require device reboot — plan for process interruption
HOTFIXInstall the October 2026 Windows security update for your Windows version (Build 10.0.14393.9612 for Windows 10 1607/Server 2016, 10.0.17763.9376 for Windows 10 1809/Server 2019, 10.0.19044.7807 for Windows 10 21H2/22H2, 10.0.20348.5761 for Server 2022, 10.0.22631.7652 for Windows 11 23H2, 10.0.26100.9711 for Windows 11 24H2, 10.0.26200.9711 for Windows 11 25H2, 10.0.26300.9711 for Windows 11 26H2, 10.0.28000.3231 for Windows 11 26H1, or 10.0.26100.33650 for Server 2025)
CVEs (1)
↑↓ Navigate · Esc Close
API:
/api/v1/advisories/70d0a210-0d42-48c9-a4e4-f9e34a0bbf83Get OTPulse briefings by email
Advisory breakdowns and incident analyses for the people actually defending OT environments. Sent when there's something worth your attention, not on a schedule. Free, no account required.