CVE-2026-69913
HighCVSS 8.1Summary
Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over a network.
Risk Assessment
Remote unauthenticated attack could lead to system takeover, posing a serious threat to infrastructure.
Recommendation
Apply security patches immediately and limit network exposure.
Other vulnerabilities in Windows TCP/IP
See all- CVE-2026-96852High
A use after free vulnerability in the Windows TCP/IP stack allows an authorized attacker to elevate privileges locally. The issue stems from accessing freed memory within the TCP/IP protocol handling code.
- CVE-2026-85834High
Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
- CVE-2026-85368High
Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
- CVE-2026-83872High
Incorrect conversion between numeric types in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
- CVE-2026-83842High
Double free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
- CVE-2026-83682High
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
- CVE-2026-83678High
Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
- CVE-2026-70164High
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
- CVE-2026-40415High
A use after free vulnerability in Windows TCP/IP allows an unauthorized attacker to execute code over a network.
- CVE-2026-40406High
A use after free vulnerability in Windows TCP/IP allows an unauthorized attacker to disclose information over a network.
Original NVD description (English source)
Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

