CVE-2026-85371
HighCVSS 8.1Summary
Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.
Risk Assessment
An attacker without valid credentials can remotely execute arbitrary code, potentially leading to full compromise of the vulnerable system.
Recommendation
Install the available Microsoft security updates for Windows as soon as possible and limit network exposure of the NPS service.
Other vulnerabilities in Network Policy Server (NPS)
See all- CVE-2026-96246High
Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to disclose information over a network.
- CVE-2026-85799High
A use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.
- CVE-2026-70207High
Heap-based buffer overflow in Network Policy Server (NPS) allows an authorized attacker to execute code over a network.
- CVE-2022-41097Medium
An information disclosure vulnerability in the RADIUS protocol in Network Policy Server (NPS) allows an attacker to gain access to sensitive data. The flaw could be exploited to intercept authentication information or other data transmitted over the network.
Original NVD description (English source)
Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS