PT-2026-113245 · Microsoft · Openssh For Windows+1
CVE-2026-97816
·
Published
2026-10-13
·
Updated
2026-10-16
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
OpenSSH for Windows versions prior to October 13, 2026 security updates
Description
A use-after-free issue allows an unauthenticated remote attacker to execute arbitrary code over a network. A use-after-free is a memory corruption flaw that occurs when an application continues to use a pointer after it has been freed, which can be exploited to redirect program execution.
Recommendations
Install the October 13 security updates.
Restrict SSH access to trusted networks.
Disable unnecessary SSH services.
Fix
DoS
RCE
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Openssh For Windows
Windows