EUVD-2026-56307
GHSA-cxrf-6fm5-464m
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Deserialization RCE reachable over the network with no authentication or user interaction and low complexity, yielding full code execution, so C/I/A all High.
Primary rating from Vendor (microsoft).
CVSS VectorVendor: microsoft
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
3DescriptionCVE.org
Deserialization of untrusted data in Microsoft High Performance Computing (HPC) Pack allows an unauthorized attacker to execute code over a network.
AnalysisAI
Remote code execution in Microsoft High Performance Computing (HPC) Pack allows an unauthorized network attacker to run arbitrary code by submitting maliciously crafted serialized data that the product deserializes without validation (CWE-502). The flaw carries a CVSS 9.8 and requires no authentication or user interaction per the vector. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Per the CVSS vector (AV:N/AC:L/PR:N/UI:N), no special conditions are required beyond network reachability to a vulnerable HPC Pack service endpoint - remote, unauthenticated exploitation with no user interaction against affected configurations. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The signals align toward high priority: the CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N) describes unauthenticated, low-complexity, network-reachable exploitation with high confidentiality, integrity, and availability impact, and deserialization RCE bugs are historically reliable to weaponize once a gadget chain is known. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker with network reachability to an HPC Pack service endpoint sends a crafted serialized message that, when deserialized by the cluster service, triggers a gadget chain and executes attacker-chosen code in the service context - no credentials or user interaction required per the CVSS vector. From that foothold on cluster infrastructure the attacker could pivot to compute nodes or tamper with scheduled jobs. … |
| Remediation | Apply the Microsoft-released security update for CVE-2026-59124 as the primary fix; the patch is available per the MSRC advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59124, where the exact fixed build for your HPC Pack version should be confirmed (no precise fix version was included in the input data). … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: Inventory all Microsoft HPC Pack installations and assess which systems process sensitive workloads or support business-critical operations. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Windows App
View allPrivilege escalation in Microsoft High Performance Computing (HPC) Pack allows a network-authenticated attacker with low
Heap-based buffer overflow in Microsoft Remote Desktop Client enables remote code execution when a user connects to a ma
Remote code execution in Microsoft Remote Desktop Client is possible when a victim connects to an attacker-controlled or
Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
Remote Desktop Client Remote Code Execution Vulnerability. Rated high severity (CVSS 8.4), this vulnerability is remotel
Heap-based buffer overflow in Remote Desktop Client allows an authorized attacker to execute code over a network. Rated
An elevation of privilege vulnerability exists in Remote Desktop App for Mac in the way it allows an attacker to load un
Information disclosure in Microsoft Windows Remote Desktop Protocol (RDP) allows remote unauthenticated attackers to rea
Information disclosure in Microsoft Windows Remote Desktop Protocol (RDP) allows unauthenticated remote attackers to rea
Remote code execution in Microsoft Remote Desktop Client is possible when a victim connects to an attacker-controlled RD
Remote code execution in Microsoft Remote Desktop Client arises from a heap-based buffer overflow (CWE-122) that an unau
Remote code execution in Microsoft Remote Desktop Client is possible when a user is enticed to connect to an attacker-co
Same weakness CWE-502 – Deserialization of Untrusted Data
View allSame technique Deserialization
View allShare
External POC / Exploit Code
Leaving vuln.today