CVE Catalog
CVE-2026-62889
HighCVSS 8.1Exploitation Probability (EPSS)
Low risk0.56%
44th percentile - higher than 44% of all known CVEs
Summary
Double free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.
Risk Assessment
A remote unauthenticated attacker could execute code on the vulnerable system, potentially leading to full compromise.
Recommendation
Apply Windows security updates and restrict access to SSTP services from trusted networks.
Original NVD description (English source)
Double free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.