CVE-2026-83655
HighCVSS 7.5Summary
Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to deny service over a network.
Risk Assessment
The attack can crash the NPS service, potentially disrupting network access authentication and authorization.
Recommendation
Install Windows security updates that address this issue.
Other vulnerabilities in Network Policy Server
See all- CVE-2026-85811High
Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over an adjacent network.
- CVE-2026-85806Critical
Integer underflow (wrap or wraparound) in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.
- CVE-2026-100222Critical
Heap-based buffer overflow in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.
Original NVD description (English source)
Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to deny service over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS