CVE-2021-34490
HighCVSS 7.5Exploitation Probability (EPSS)
High risk86th percentile - higher than 86% of all known CVEs
Summary
Denial of service vulnerability in Windows TCP/IP driver. Could cause system crash.
Risk Assessment
Risk of disruption of network services.
Recommendation
Apply Windows security updates.
Other vulnerabilities in Windows TCP/IP
See all- CVE-2026-96852High
A use after free vulnerability in the Windows TCP/IP stack allows an authorized attacker to elevate privileges locally. The issue stems from accessing freed memory within the TCP/IP protocol handling code.
- CVE-2026-85834High
Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
- CVE-2026-85368High
Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
- CVE-2026-40415High
A use after free vulnerability in Windows TCP/IP allows an unauthorized attacker to execute code over a network.
- CVE-2026-40406High
A use after free vulnerability in Windows TCP/IP allows an unauthorized attacker to disclose information over a network.
- CVE-2026-40405High
A null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over a network.
- CVE-2026-34351High
A race condition in Windows TCP/IP allows for concurrent execution using shared resources with improper synchronization. This enables an authorized attacker to elevate privileges locally.
- CVE-2026-34334High
A race condition in Windows TCP/IP allows for concurrent execution using shared resources with improper synchronization. This enables an authorized attacker to elevate privileges locally.
- CVE-2026-33837High
Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
- CVE-2026-42904Critical
Heap-based buffer overflow in Windows TCP/IP allows an unauthorized attacker to elevate privileges over an adjacent network.
Original NVD description (English source)
Windows TCP/IP Driver Denial of Service Vulnerability
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

