{"id":"CVE-2026-83684","kind":"vulnerability","aliases":["CVE-2026-83684"],"related":[],"title":"Windows iSCSI Target Service: buffer over-read leaks memory to network attackers","description":"Buffer over-read in Windows iSCSI Target Service allows an unauthorized attacker to disclose information over a network.","summary":"The Windows iSCSI Target Service reads past the end of a buffer when handling network requests. A remote, unauthenticated attacker can use this to disclose information from server memory.","severity":"high","cvss":7.5,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","iscsi","windows","windows-server"],"not_affected_if":["iscsi-target-not-enabled","no-network-exposure"],"how_to_check":"- Check whether the iSCSI Target Service is installed and running on Windows Server (`Get-WindowsFeature FS-iSCSITarget-Server` and `Get-Service MsiSCSI`, or `Get-Service WinTarget`)","fix":null,"status":"open","published_at":"2026-11-10T19:21:23+00:00","first_seen_at":"2026-11-10T19:25:17+00:00","triaged_at":"2026-11-10T19:43:04+00:00","updated_at":"2026-11-10T19:43:04+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-11-10T19:43:04Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"Windows iSCSI Target Service: buffer over-read leaks memory to network attackers","impact":"low","summary":"The Windows iSCSI Target Service reads past the end of a buffer when handling network requests. A remote, unauthenticated attacker can use this to disclose information from server memory.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["windows","iscsi","windows-server"],"confidence":0.6,"fix_status":"unknown","needs_auth":"no","worst_case":"Attacker reads sensitive memory contents from the iSCSI target server over the network.","analyst_note":"Confirm affected Windows builds and the Microsoft security update from the NVD and MSRC entries for CVE-2026-83684.","how_to_check":"- Check whether the iSCSI Target Service is installed and running on Windows Server (`Get-WindowsFeature FS-iSCSITarget-Server` and `Get-Service MsiSCSI`, or `Get-Service WinTarget`)\n- unknown for the exact affected Windows builds, as the sources do not list them","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["iscsi-target-not-enabled","no-network-exposure"],"who_is_affected":"Only Windows machines running the iSCSI Target Service, which exposes block storage over the network, are at risk. Systems that do not host iSCSI targets, or that restrict iSCSI traffic to trusted networks, are less exposed. The sources do not list affected Windows versions.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"yes","severity_if_unknown":"high"},"cost_usd":0.000736,"input_tokens":4494,"output_tokens":573,"severity_before":"high"},"analyst_status":"queued","analyst_note":"Confirm affected Windows builds and the Microsoft security update from the NVD and MSRC entries for CVE-2026-83684.","search":"'-2026':15A,18A '-83684':16A,19A 'allow':64C 'attack':13A,45B,67C 'buffer':5A,37B,55C 'cve':14A,17A 'disclos':50B,69C 'end':34B 'handl':39B 'inform':51B,70C 'infrastructur':20B 'iscsi':2A,21B,28B,61C 'leak':9A 'memori':10A,54B 'network':12A,40B,73C 'over-read':6A,56C 'past':32B 'read':8A,31B,58C 'remot':43B 'request':41B 'server':25B,53B 'servic':4A,30B,63C 'target':3A,29B,62C 'unauthent':44B 'unauthor':66C 'use':47B 'window':1A,22B,24B,27B,60C 'windows-serv':23B","nicknames":[],"mitigations":[],"who_affected":"Only Windows machines running the iSCSI Target Service, which exposes block storage over the network, are at risk. Systems that do not host iSCSI targets, or that restrict iSCSI traffic to trusted networks, are less exposed. The sources do not list affected Windows versions.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["high","infrastructure","iscsi","windows","windowsserver"],"campaign_type":null,"search_a":"'-2026':15A,18A '-83684':16A,19A 'attack':13A 'buffer':5A 'cve':14A,17A 'iscsi':2A 'leak':9A 'memori':10A 'network':12A 'over-read':6A 'read':8A 'servic':4A 'target':3A 'window':1A","search_b":"'attack':45B 'buffer':37B 'disclos':50B 'end':34B 'handl':39B 'inform':51B 'infrastructur':20B 'iscsi':21B,28B 'memori':54B 'network':40B 'past':32B 'read':31B 'remot':43B 'request':41B 'server':25B,53B 'servic':30B 'target':29B 'unauthent':44B 'use':47B 'window':22B,24B,27B 'windows-serv':23B","search_c":"'allow':64C 'attack':67C 'buffer':55C 'disclos':69C 'inform':70C 'iscsi':61C 'network':73C 'over-read':56C 'read':58C 'servic':63C 'target':62C 'unauthor':66C 'window':60C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:21:23+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-83684","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-83684","severity":null,"published_at":"2026-11-10T19:21:23+00:00","modified_at":"2026-11-10T19:21:23+00:00","first_seen_at":"2026-11-10T19:25:17+00:00","fetched_at":"2026-11-10T19:25:17+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}