CVE-2026-70072
MediumCVSS 6.5Exploitation Probability (EPSS)
Elevated risk65th percentile - higher than 65% of all known CVEs
Summary
Allocation of resources without limits or throttling in Windows Netlogon allows an authorized attacker to deny service over a network.
Risk Assessment
An attacker could overwhelm the system, causing unavailability of Netlogon services, potentially disrupting the entire network.
Recommendation
Install security patches and consider implementing resource limits for Netlogon services.
Other vulnerabilities in Windows Netlogon
See all- CVE-2026-72982Critical
Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code remotely over a network.
- CVE-2026-41089Critical
Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network.
- CVE-2026-70090Medium
Use of uninitialized resource in Windows Netlogon allows an authorized attacker to disclose information locally.
- CVE-2026-70025Medium
Use after free in Windows Netlogon allows an authorized attacker to deny service over a network.
- CVE-2026-62759High
Authentication bypass by spoofing in Windows Netlogon allows an unauthorized attacker to perform spoofing over an adjacent network.
- CVE-2026-50500High
A Use-After-Free vulnerability in Windows Netlogon allows an authorized attacker to remotely elevate privileges over a network. The issue stems from improper memory management during authentication request processing.
Original NVD description (English source)
Allocation of resources without limits or throttling in Windows Netlogon allows an authorized attacker to deny service over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS