CVE-2026-69404

HighCVSS 7.0

Published: 08/09/2026(UTC)Updated: 24/09/2026(UTC)Translated: 09/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.20%

9th percentile - higher than 9% of all known CVEs

Summary

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

Risk Assessment

A local attacker could exploit the race condition to escalate privileges and take over the system.

Recommendation

Apply the latest Windows security updates.

Other vulnerabilities in Windows TCP/IP

See all

CVE-2026-40415High
A use after free vulnerability in Windows TCP/IP allows an unauthorized attacker to execute code over a network.
CVE-2026-40406High
A use after free vulnerability in Windows TCP/IP allows an unauthorized attacker to disclose information over a network.
CVE-2026-40405High
A null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over a network.
CVE-2026-34351High
A race condition in Windows TCP/IP allows for concurrent execution using shared resources with improper synchronization. This enables an authorized attacker to elevate privileges locally.
CVE-2026-34334High
A race condition in Windows TCP/IP allows for concurrent execution using shared resources with improper synchronization. This enables an authorized attacker to elevate privileges locally.
CVE-2026-33837High
Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
CVE-2026-42904Critical
Heap-based buffer overflow in Windows TCP/IP allows an unauthorized attacker to elevate privileges over an adjacent network.
CVE-2021-26424Critical
Remote code execution vulnerability in Windows TCP/IP stack. It could allow an attacker to execute arbitrary code in the context of the kernel.
CVE-2026-69793High
Improper validation of consistency within input in Windows TCP/IP allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-69761High
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network.

Original NVD description (English source)

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS