CVE-2026-0386

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Deployment Services allows an unauthorized attacker to execute code over a network.

A use-after-free vulnerability in Windows Deployment Services allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows Deployment Services allows an authorized attacker to execute code locally.

Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network.

Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network.

Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network.

Use-After-Free vulnerability in Windows Deployment Services allows an unauthorized attacker to execute code remotely.

A vulnerability in Windows Deployment Services allows remote code execution by an attacker. Exploiting this flaw could lead to system takeover.

A vulnerability in Windows Deployment Services allows attackers to remotely trigger a fault, leading to denial of service. Exploiting this flaw may result in service unavailability for users.