CVE-2026-72967
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk24th percentile - higher than 24% of all known CVEs
Summary
Heap-based buffer overflow in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker with local access could gain elevated privileges, potentially leading to full system compromise.
Recommendation
Install the latest security updates provided by the Windows vendor.
Other vulnerabilities in Windows Network Connection Broker
See all- CVE-2026-68886Medium
A vulnerability in Windows Network Connection Broker involves a use-after-free condition, allowing an authorized attacker to disclose information locally.
- CVE-2026-61366High
Double free in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Heap-based buffer overflow in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS