CVE-2026-71332
HighCVSS 7.0Exploitation Probability (EPSS)
Low risk17th percentile - higher than 17% of all known CVEs
Summary
Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate privileges locally.
Risk Assessment
Privilege escalation could allow an attacker to take control of the system and access confidential information.
Recommendation
Apply the latest Windows security updates from the vendor.
Other vulnerabilities in Windows Secure Socket Tunneling Protocol (SSTP)
See all- CVE-2026-88147High
A heap-based buffer overflow in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate privileges locally.
- CVE-2026-85926High
Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.
- CVE-2026-73009Critical
Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.
Original NVD description (English source)
Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS