CVE-2026-42904

CriticalCVSS 9.6

Published: 09/06/2026(UTC)Updated: 23/07/2026(UTC)Translated: 24/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.44%

36th percentile - higher than 36% of all known CVEs

Heap-based buffer overflow in Windows TCP/IP allows an unauthorized attacker to elevate privileges over an adjacent network.

An attacker could gain elevated privileges on the local network, potentially leading to compromise of sensitive systems.

Install the latest Windows security updates from Microsoft.

Original NVD description (English source)

Heap-based buffer overflow in Windows TCP/IP allows an unauthorized attacker to elevate privileges over an adjacent network.