CVE-2026-61366
HighCVSS 7.0Exploitation Probability (EPSS)
Low risk16th percentile - higher than 16% of all known CVEs
Summary
Double free in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker could exploit this to gain elevated privileges, potentially leading to system crashes or unauthorized actions.
Recommendation
Apply the latest security updates from Microsoft.
Other vulnerabilities in Windows Network Connection Broker
See all- CVE-2026-72967High
Heap-based buffer overflow in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally.
- CVE-2026-68886Medium
A vulnerability in Windows Network Connection Broker involves a use-after-free condition, allowing an authorized attacker to disclose information locally.
Original NVD description (English source)
Double free in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS