Windows TCP/IP vulnerabilities

18 known CVE vulnerabilities in Windows TCP/IP, translated and rated.

CVE-2026-40415High
A use after free vulnerability in Windows TCP/IP allows an unauthorized attacker to execute code over a network.
CVE-2026-40406High
A use after free vulnerability in Windows TCP/IP allows an unauthorized attacker to disclose information over a network.
CVE-2026-40405High
A null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over a network.
CVE-2026-34351High
A race condition in Windows TCP/IP allows for concurrent execution using shared resources with improper synchronization. This enables an authorized attacker to elevate privileges locally.
CVE-2026-34334High
A race condition in Windows TCP/IP allows for concurrent execution using shared resources with improper synchronization. This enables an authorized attacker to elevate privileges locally.
CVE-2026-33837High
Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
CVE-2026-42904Critical
Heap-based buffer overflow in Windows TCP/IP allows an unauthorized attacker to elevate privileges over an adjacent network.
CVE-2021-26424Critical
Remote code execution vulnerability in Windows TCP/IP stack. It could allow an attacker to execute arbitrary code in the context of the kernel.
CVE-2026-62792High
Stack-based buffer overflow in Windows TCP/IP allows an unauthorized attacker to execute code over a network.
CVE-2026-59132High
A vulnerability in Windows TCP/IP involves a null pointer dereference, allowing an unauthorized attacker to cause a denial of service (DoS) over a network.
CVE-2026-50307High
A use-after-free vulnerability exists in the Windows TCP/IP stack. This allows an authorized attacker to elevate privileges locally.
CVE-2026-50306High
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
CVE-2026-49177Medium
Out-of-bounds read in Windows TCP/IP allows an authorized attacker to disclose information locally.
CVE-2026-54999High
A race condition in Windows TCP/IP stack allows concurrent access to shared resources without proper synchronization. This enables an unauthorized attacker to execute code over an adjacent network.
CVE-2026-33827High
A race condition vulnerability in the Windows TCP/IP stack allows an unauthorized attacker to execute code remotely over a network.
CVE-2024-38045High
Remote code execution vulnerability in Windows TCP/IP stack. An attacker could exploit this flaw to execute code remotely.
CVE-2024-21416High
Remote code execution vulnerability in Windows TCP/IP stack. It allows an attacker to execute code remotely.
CVE-2021-34490High
Denial of service vulnerability in Windows TCP/IP driver. Could cause system crash.