CVE-2026-62893
CriticalCVSS 9.8Exploitation Probability (EPSS)
High risk85th percentile - higher than 85% of all known CVEs
Summary
A use-after-free vulnerability in Windows Deployment Services allows an unauthorized attacker to execute code over a network.
Risk Assessment
An attacker could exploit the flaw to execute malicious code, potentially leading to system takeover.
Recommendation
Install security updates for Windows Deployment Services and monitor the network for suspicious activity.
Other vulnerabilities in Windows Deployment Services
See all- CVE-2026-0386High
A vulnerability in Windows Deployment Services is due to improper access control. An unauthorized attacker can execute code over an adjacent network.
- CVE-2026-72957High
Heap-based buffer overflow in Windows Deployment Services allows an authorized attacker to execute code locally.
- CVE-2026-72954High
Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network.
- CVE-2026-72943High
Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network.
- CVE-2026-69607High
Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network.
- CVE-2026-42987High
Use-After-Free vulnerability in Windows Deployment Services allows an unauthorized attacker to execute code remotely.
- CVE-2023-35322High
A vulnerability in Windows Deployment Services allows remote code execution by an attacker. Exploiting this flaw could lead to system takeover.
- CVE-2023-35321Medium
A vulnerability in Windows Deployment Services allows attackers to remotely trigger a fault, leading to denial of service. Exploiting this flaw may result in service unavailability for users.
Original NVD description (English source)
Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS