CVE-2026-59132

HighCVSS 7.5

Published: 11/08/2026(UTC)Updated: 16/08/2026(UTC)Translated: 11/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.31%

68th percentile - higher than 68% of all known CVEs

Summary

A vulnerability in Windows TCP/IP involves a null pointer dereference, allowing an unauthorized attacker to cause a denial of service (DoS) over a network.

Risk Assessment

An attacker could crash network services, leading to unavailability of the system or applications relying on TCP/IP.

Recommendation

Install Windows security updates. Monitor network traffic for suspicious packets that could trigger this vulnerability.

Other vulnerabilities in Windows TCP/IP

See all

CVE-2026-96852High
A use after free vulnerability in the Windows TCP/IP stack allows an authorized attacker to elevate privileges locally. The issue stems from accessing freed memory within the TCP/IP protocol handling code.
CVE-2026-85834High
Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
CVE-2026-85368High
Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
CVE-2026-40415High
A use after free vulnerability in Windows TCP/IP allows an unauthorized attacker to execute code over a network.
CVE-2026-40406High
A use after free vulnerability in Windows TCP/IP allows an unauthorized attacker to disclose information over a network.
CVE-2026-40405High
A null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over a network.
CVE-2026-34351High
A race condition in Windows TCP/IP allows for concurrent execution using shared resources with improper synchronization. This enables an authorized attacker to elevate privileges locally.
CVE-2026-34334High
A race condition in Windows TCP/IP allows for concurrent execution using shared resources with improper synchronization. This enables an authorized attacker to elevate privileges locally.
CVE-2026-33837High
Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
CVE-2026-42904Critical
Heap-based buffer overflow in Windows TCP/IP allows an unauthorized attacker to elevate privileges over an adjacent network.

Original NVD description (English source)

Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over a network.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS