Skip to main content
CVE-2026-98879VulnerabilityPublished Updated

Microsoft · isofs: handle set_blocksize failures

Affects MicrosoftSource GCVE Database

0
Compare
Authoritative record:CVE-2026-98879· Medium

Not known to be exploited · fixed in cebde6d88e34396c29f2f001d90e921677cc17d6 : update Microsoft when convenient.

Data as of 2 Nov 2026, 10:58 UTC

Severity
Medium

Rated by Threat Radar · CVSS not yet scored by NVD

Thin evidence

One scorer or none
EPSS
0.1% chance of exploitation in 30 days – higher than 7% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
Patch
Available – fixed in cebde6d88e34396c29f2f001d90e921677cc17d6, 9584ab6283721e5aab485c79bd06c2f78d89e55c, 61f277bf35f533b602984f0e55900111fe52f31a +4

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 23 Oct 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponized: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 2 Nov 2026.

What to do

Upgrade to a fixed release listed under Affected software.

Affected software

ProductAffectedFixed in
LinuxLinuxAffected
  • ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < cebde6d88e34396c29f2f001d90e921677cc17d6
Fixed in
  • cebde6d88e34396c29f2f001d90e921677cc17d6
LinuxLinuxAffected
  • ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 9584ab6283721e5aab485c79bd06c2f78d89e55c
Fixed in
  • 9584ab6283721e5aab485c79bd06c2f78d89e55c
LinuxLinuxAffected
  • ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 61f277bf35f533b602984f0e55900111fe52f31a
Fixed in
  • 61f277bf35f533b602984f0e55900111fe52f31a
LinuxLinuxAffected
  • ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 28d1f6aa14f5924e36602b7a31c9141d34de0b9c
Fixed in
  • 28d1f6aa14f5924e36602b7a31c9141d34de0b9c
LinuxLinuxAffected
  • ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 25ef4c4d9f0e96fb89c0ae0d7127c3f12a31bc32
Fixed in
  • 25ef4c4d9f0e96fb89c0ae0d7127c3f12a31bc32
LinuxLinuxAffected
  • ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 9c97e3b1152d3092581745189f5d2f04c6404ef9
Fixed in
  • 9c97e3b1152d3092581745189f5d2f04c6404ef9

Description

CVE-2026-98879 is a vulnerability related to the handling of set_blocksize failures in the isofs component. The information provided does not include specific technical details about the nature of the flaw or its impact. The affected versions are Microsoft products version 3.0 and 4.0. No CVSS score or exploit information is available.

References

Community reviews

Loading reviews…