CVE-2026-88147
HighCVSS 7.8Summary
A heap-based buffer overflow in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker with valid credentials could exploit this flaw to gain higher privileges, potentially resulting in full system compromise.
Recommendation
Immediately apply security updates for SSTP and consider disabling it if not required.
Other vulnerabilities in Windows Secure Socket Tunneling Protocol (SSTP)
See all- CVE-2026-85926High
Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.
- CVE-2026-73009Critical
Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.
- CVE-2026-71332High
Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Heap-based buffer overflow in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS