CVE-2026-0386
HighSummary
A vulnerability in Windows Deployment Services is due to improper access control. An unauthorized attacker can execute code over an adjacent network.
Risk Assessment
An attacker on an adjacent network could execute malicious code, potentially leading to control of the service and possibly the entire system.
Recommendation
Restrict network access to Windows Deployment Services and apply vendor security updates.
Other vulnerabilities in Windows Deployment Services
See all- CVE-2026-62893Critical
A use-after-free vulnerability in Windows Deployment Services allows an unauthorized attacker to execute code over a network.
- CVE-2026-42987High
Use-After-Free vulnerability in Windows Deployment Services allows an unauthorized attacker to execute code remotely.
- CVE-2023-35322High
A vulnerability in Windows Deployment Services allows remote code execution by an attacker. Exploiting this flaw could lead to system takeover.
- CVE-2023-35321Medium
A vulnerability in Windows Deployment Services allows attackers to remotely trigger a fault, leading to denial of service. Exploiting this flaw may result in service unavailability for users.
Original NVD description (English source)
Improper access control in Windows Deployment Services allows an unauthorized attacker to execute code over an adjacent network.