Windows Deployment Services vulnerabilities
10 known CVE vulnerabilities in Windows Deployment Services, translated and rated.
- CVE-2026-88174High
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Deployment Services allows an unauthorized attacker to execute code over a network.
- CVE-2026-0386High
A vulnerability in Windows Deployment Services is due to improper access control. An unauthorized attacker can execute code over an adjacent network.
- CVE-2026-62893Critical
A use-after-free vulnerability in Windows Deployment Services allows an unauthorized attacker to execute code over a network.
- CVE-2026-72957High
Heap-based buffer overflow in Windows Deployment Services allows an authorized attacker to execute code locally.
- CVE-2026-72954High
Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network.
- CVE-2026-72943High
Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network.
- CVE-2026-69607High
Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network.
- CVE-2026-42987High
Use-After-Free vulnerability in Windows Deployment Services allows an unauthorized attacker to execute code remotely.
- CVE-2023-35322High
A vulnerability in Windows Deployment Services allows remote code execution by an attacker. Exploiting this flaw could lead to system takeover.
- CVE-2023-35321Medium
A vulnerability in Windows Deployment Services allows attackers to remotely trigger a fault, leading to denial of service. Exploiting this flaw may result in service unavailability for users.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

