- Description
- Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
- Source
- secure@microsoft.com
- NVD status
- Analyzed
- Products
- windows_10_1809, windows_10_21h2, windows_10_22h2, windows_11_23h2, windows_11_24h2, windows_11_25h2, windows_11_26h1, windows_11_26h2, windows_server_2019, windows_server_2022, windows_server_2025
CVSS 3.1
- Type
- Secondary
- Base score
- 8.8
- Impact score
- 5.9
- Exploitability score
- 2.8
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- Severity
- HIGH
- secure@microsoft.com
- CWE-122
- Hype score
- Not currently trending
CVE advisory: CVE-2026-88157 - microsoft: Microsoft OpenSSH for Windows Remote Code Execution Vulnerability. https://t.co/ROE1hOBmE9 #CVE #CyberSecurity #Microsoft #WindowsServer
@vulnipulse
19 Oct 2026
23 Impressions
0 Retweets
0 Likes
0 Bookmarks
1 Reply
0 Quotes
Microsofts October 2026 Patch Tuesday was the largest it has ever shipped: 1,400+ CVEs. I'm personally guilty of adding four of them. 😁 CVE-2026-83754, CVE-2026-88157, CVE-2026-83923, CVE-2026-69968 #patchtuesday #msrc #microsoft #vulnerabilityresearch
@owais_tsg
14 Oct 2026
45 Impressions
0 Retweets
1 Like
0 Bookmarks
0 Replies
0 Quotes
[
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
"matchCriteriaId": "15BDFD52-C4C7-440A-B97C-D7637E77AFAC",
"versionEndExcluding": "10.0.17763.9376",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
"matchCriteriaId": "A1A74FEC-9922-4060-A2C0-06080FB4DDA8",
"versionEndExcluding": "10.0.17763.9376",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:arm64:*",
"matchCriteriaId": "53D23AF8-230C-4B39-8A91-3881AA31989A",
"versionEndExcluding": "10.0.19044.7807",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*",
"matchCriteriaId": "67F442ED-4C44-46E2-9DC1-C8B5E6DCEDBB",
"versionEndExcluding": "10.0.19044.7807",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:*",
"matchCriteriaId": "9F10DA49-990A-41B9-A6AB-F672D1FF4685",
"versionEndExcluding": "10.0.19044.7807",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:arm64:*",
"matchCriteriaId": "D17757C7-94AA-426C-85B8-82E265C34790",
"versionEndExcluding": "10.0.19045.7807",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*",
"matchCriteriaId": "06420E5D-7B0B-4E29-BDCF-49B0C0ACE784",
"versionEndExcluding": "10.0.19045.7807",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x86:*",
"matchCriteriaId": "B1853485-D4E4-4ACB-B832-F00AFEB10823",
"versionEndExcluding": "10.0.19045.7807",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:arm64:*",
"matchCriteriaId": "C31937C6-EFB5-4325-9F94-0F356B164035",
"versionEndExcluding": "10.0.22631.7652",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:x64:*",
"matchCriteriaId": "AAC3F2E7-6713-4BE0-9DAA-59310B4C3863",
"versionEndExcluding": "10.0.22631.7652",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:arm64:*",
"matchCriteriaId": "E2A85326-7BE4-4F2C-AF37-45FD4B939D07",
"versionEndExcluding": "10.0.26100.9711",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:x64:*",
"matchCriteriaId": "03291588-C7D5-445C-AD9F-03D3ADE6BE8A",
"versionEndExcluding": "10.0.26100.9711",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:arm64:*",
"matchCriteriaId": "5E5700DF-EF80-4D08-9B32-E0481EAE8147",
"versionEndExcluding": "10.0.26200.9711",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:x64:*",
"matchCriteriaId": "BA7D90B4-6AD5-4EF9-8709-01E4CED31779",
"versionEndExcluding": "10.0.26200.9711",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_11_26h1:*:*:*:*:*:*:arm64:*",
"matchCriteriaId": "EC0260C7-D6B6-487F-B304-CAAE72608BF7",
"versionEndExcluding": "10.0.28000.3231",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_11_26h1:*:*:*:*:*:*:x64:*",
"matchCriteriaId": "8DA3AD5D-32C0-4AC9-A856-512106D42CC7",
"versionEndExcluding": "10.0.28000.3231",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_11_26h2:*:*:*:*:*:*:arm64:*",
"matchCriteriaId": "8D5DCA1A-EF56-43AF-B079-011AE5C2F846",
"versionEndExcluding": "10.0.26300.9711",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_11_26h2:*:*:*:*:*:*:x64:*",
"matchCriteriaId": "38D4479B-ACB0-4DC7-A4B1-F448C5B2EBD8",
"versionEndExcluding": "10.0.26300.9711",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:x64:*",
"matchCriteriaId": "D8CE3341-8771-4A25-9BF6-2A280D9C536C",
"versionEndExcluding": "10.0.17763.9376",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:x64:*",
"matchCriteriaId": "A98E694F-9390-488A-A7FB-3E7BF7E988F8",
"versionEndExcluding": "10.0.20348.5761",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:x64:*",
"matchCriteriaId": "D95E80FE-F34C-4805-9A66-75D090E65BBB",
"versionEndExcluding": "10.0.26100.33650",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
]