Bitcoin Core bug lets malicious peers crash Windows and Mac nodes

A medium-severity flaw involving TCP urgent data could exhaust memory on non-Linux machines, and patched versions are already out Bitcoin Core has disclosed a bug that lets a malicious peer crash nodes running on Windows and macOS by flooding them into memory exhaustion. The fix is already available, which means the main remaining risk is the operator who never clicks update. The flaw was one of three vulnerabilities disclosed on October 28, 2026. It carries a medium-severity rating and affects nodes on non-Linux operating systems. An attacker connected as a peer sends TCP urgent data, also called out-of-band data.