CVE-2026-70164
HighCVSS 7.0Summary
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
Risk Assessment
A local attacker could exploit the flaw to elevate privileges, potentially leading to system compromise.
Recommendation
Apply security patches from Microsoft for the TCP/IP stack.
Other vulnerabilities in Windows TCP/IP
See all- CVE-2026-96852High
A use after free vulnerability in the Windows TCP/IP stack allows an authorized attacker to elevate privileges locally. The issue stems from accessing freed memory within the TCP/IP protocol handling code.
- CVE-2026-85834High
Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
- CVE-2026-85368High
Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
- CVE-2026-83872High
Incorrect conversion between numeric types in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
- CVE-2026-83842High
Double free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
- CVE-2026-83682High
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
- CVE-2026-83678High
Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
- CVE-2026-69913High
Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over a network.
- CVE-2026-40415High
A use after free vulnerability in Windows TCP/IP allows an unauthorized attacker to execute code over a network.
- CVE-2026-40406High
A use after free vulnerability in Windows TCP/IP allows an unauthorized attacker to disclose information over a network.
Original NVD description (English source)
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS