CVE Catalog
CVE-2026-72930
HighCVSS 7.0Summary
Use-after-free in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to execute code locally.
Risk Assessment
An attacker with local access could exploit this to gain control of the system, potentially leading to full compromise.
Recommendation
Apply the latest Windows security updates that address this vulnerability.
Other vulnerabilities in Windows SSTP
See all- CVE-2026-72931Medium
Missing release of resource after effective lifetime in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to deny service locally.
- CVE-2026-62889High
Double free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.
Original NVD description (English source)
Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to execute code locally.