CVE-2026-97830
HighCVSS 7.5Exploitation Probability (EPSS)
Elevated risk58th percentile - higher than 58% of all known CVEs
Summary
A double free in Windows Internet Information Services allows an unauthorized attacker to deny service over a network.
Risk Assessment
An attacker can cause IIS services to crash, leading to unavailability of web services and potential financial losses.
Recommendation
Install the latest security updates for Windows IIS and monitor network traffic for anomalies.
Other vulnerabilities in Windows Internet Information Services
See all- CVE-2026-70024Critical
Stack-based buffer overflow in Windows Internet Information Services allows an unauthorized attacker to execute code over a network.
- CVE-2026-78459High
Heap-based buffer overflow in Windows Internet Information Services allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Double free in Windows Internet Information Services allows an unauthorized attacker to deny service over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS