An uncaught exception in the Windows Failover Cluster component causes the cluster to become unresponsive, allowing an attacker without authentication to deny service to network clients. This leads to a loss of availability for services that rely on the cluster, without compromising confidentiality or integrity. The weakness is identified as a lack of proper exception handling (CWE‑248).

Affected platforms are Microsoft Windows Server 2019 (including Server Core), Windows Server 2022, and Windows Server 2025 (including Server Core). The vulnerability is present in the Failover Cluster role on these operating systems.

With a CVSS score of 7.5, the vulnerability represents a high‑severity denial‑of‑service risk. No EPSS data is available, and the vulnerability is not listed in the CISA KEV catalog, suggesting no widespread exploitation yet. The attack vector is inferred to be remote over the network, requiring an unauthorized attacker to send malformed or specific requests to the cluster service. If exploited, the cluster would become temporarily unavailable until a reboot or patch is applied.