CVE-2026-42987

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Deployment Services allows an unauthorized attacker to execute code over a network.

A vulnerability in Windows Deployment Services is due to improper access control. An unauthorized attacker can execute code over an adjacent network.

A use-after-free vulnerability in Windows Deployment Services allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows Deployment Services allows an authorized attacker to execute code locally.

Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network.

Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network.

Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network.

A vulnerability in Windows Deployment Services allows remote code execution by an attacker. Exploiting this flaw could lead to system takeover.

A vulnerability in Windows Deployment Services allows attackers to remotely trigger a fault, leading to denial of service. Exploiting this flaw may result in service unavailability for users.