CVE-2026-68886

MediumCVSS 5.5

Published: 08/09/2026(UTC)Updated: 17/09/2026(UTC)Translated: 09/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.47%

40th percentile - higher than 40% of all known CVEs

Summary

A vulnerability in Windows Network Connection Broker involves a use-after-free condition, allowing an authorized attacker to disclose information locally.

Risk Assessment

This may lead to data disclosure or further system compromise, posing a serious threat.

Recommendation

Urgently install security patches and restrict local access.

Other vulnerabilities in Windows Network Connection Broker

See all

CVE-2026-72967High
Heap-based buffer overflow in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally.
CVE-2026-61366High
Double free in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally.

Original NVD description (English source)

Use after free in Windows Network Connection Broker allows an authorized attacker to disclose information locally.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS