CVE-2026-40415
HighSummary
A use after free vulnerability in Windows TCP/IP allows an unauthorized attacker to execute code over a network.
Risk Assessment
An attacker could remotely take control of the system, posing a serious security threat to the organization.
Recommendation
It is recommended to update the operating system to the latest version to mitigate this vulnerability.
Other vulnerabilities in Windows TCP/IP
See all- CVE-2026-40406High
A use after free vulnerability in Windows TCP/IP allows an unauthorized attacker to disclose information over a network.
- CVE-2026-40405High
A null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over a network.
- CVE-2026-34351High
A race condition in Windows TCP/IP allows for concurrent execution using shared resources with improper synchronization. This enables an authorized attacker to elevate privileges locally.
- CVE-2026-34334High
A race condition in Windows TCP/IP allows for concurrent execution using shared resources with improper synchronization. This enables an authorized attacker to elevate privileges locally.
- CVE-2026-33837High
Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
- CVE-2026-42904Critical
Heap-based buffer overflow in Windows TCP/IP allows an unauthorized attacker to elevate privileges over an adjacent network.
- CVE-2021-26424Critical
Remote code execution vulnerability in Windows TCP/IP stack. It could allow an attacker to execute arbitrary code in the context of the kernel.
- CVE-2026-62792High
Stack-based buffer overflow in Windows TCP/IP allows an unauthorized attacker to execute code over a network.
- CVE-2026-59132High
A vulnerability in Windows TCP/IP involves a null pointer dereference, allowing an unauthorized attacker to cause a denial of service (DoS) over a network.
- CVE-2026-50307High
A use-after-free vulnerability exists in the Windows TCP/IP stack. This allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over a network.