CVE-2026-59124

CVE Enrichment

CVSS: 9.8 CRITICAL
EPSS: 1.53%
EPSS Percentile: 74.63%
CISA KEV: Not listed

Description

Deserialization of untrusted data in Microsoft High Performance Computing (HPC) Pack allows an unauthorized attacker to execute code over a network.

Technical Details

CVSS Version: 3.1
CNA / NVD Source: [email protected]
Published: 12-Aug-2026 00:18
Last Modified: 24-Oct-2026 23:10
EPSS Date: 2026-10-24
CWE: CWE-502

CVSS Vector


            CVSS:3.1                            AV:N /
                            AC:L /
                            PR:N /
                            UI:N /
                            S:U /
                            C:H /
                            I:H /
                            A:H

Affected Products / Versions

microsoft / windows_app
Version / affected range: * · before (exclusive) 2.0.1314.0
cpe:2.3:a:microsoft:windows_app:*:*:*:*:*:windows:*:*

References

[email protected]

Last enrichment sync: 25-Oct-2026 15:13
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.

Reported Context (2)

CVE-2026-59124, HPC Pack. It carries the same 9.8 score but is rated Important rather than Critical because HPC Pack is not installed by default. Microsoft Patches 398 Flaws, Including Actively Exploited Windows Driver Zero-Day
that defenders should pay attention to include CVE-2026-62878, CVE-2026-62893, CVE-2026-62815, and CVE-2026-59124, which are remote code execution (RCE) bugs in Windows DNS server, Windows Deployment Services TFTP Microsoft Fixes 421 CVEs in August 2026 Patch Tuesday, Including Exploited Zero-Day

CVE (14)

People (2)

Threat Actors (2)

MITRE ATT&CK (1)

Vendors (1)

Products (15)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.