Windows TCP/IP vulnerabilities
25 known CVE vulnerabilities in Windows TCP/IP, translated and rated.
- CVE-2026-96852High
A use after free vulnerability in the Windows TCP/IP stack allows an authorized attacker to elevate privileges locally. The issue stems from accessing freed memory within the TCP/IP protocol handling code.
- CVE-2026-40415High
A use after free vulnerability in Windows TCP/IP allows an unauthorized attacker to execute code over a network.
- CVE-2026-40406High
A use after free vulnerability in Windows TCP/IP allows an unauthorized attacker to disclose information over a network.
- CVE-2026-40405High
A null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over a network.
- CVE-2026-34351High
A race condition in Windows TCP/IP allows for concurrent execution using shared resources with improper synchronization. This enables an authorized attacker to elevate privileges locally.
- CVE-2026-34334High
A race condition in Windows TCP/IP allows for concurrent execution using shared resources with improper synchronization. This enables an authorized attacker to elevate privileges locally.
- CVE-2026-33837High
Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
- CVE-2026-42904Critical
Heap-based buffer overflow in Windows TCP/IP allows an unauthorized attacker to elevate privileges over an adjacent network.
- CVE-2021-26424Critical
Remote code execution vulnerability in Windows TCP/IP stack. It could allow an attacker to execute arbitrary code in the context of the kernel.
- CVE-2026-69793High
Improper validation of consistency within input in Windows TCP/IP allows an unauthorized attacker to bypass a security feature over a network.
- CVE-2026-69761High
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network.
- CVE-2026-69757High
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network.
- CVE-2026-69588High
Missing release of memory after effective lifetime in Windows TCP/IP allows an unauthorized attacker to deny service over a network.
- CVE-2026-69404High
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
- CVE-2026-69385High
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
- CVE-2026-62792High
Stack-based buffer overflow in Windows TCP/IP allows an unauthorized attacker to execute code over a network.
- CVE-2026-59132High
A vulnerability in Windows TCP/IP involves a null pointer dereference, allowing an unauthorized attacker to cause a denial of service (DoS) over a network.
- CVE-2026-50307High
A use-after-free vulnerability exists in the Windows TCP/IP stack. This allows an authorized attacker to elevate privileges locally.
- CVE-2026-50306High
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
- CVE-2026-49177Medium
Out-of-bounds read in Windows TCP/IP allows an authorized attacker to disclose information locally.
- CVE-2026-54999High
A race condition in Windows TCP/IP stack allows concurrent access to shared resources without proper synchronization. This enables an unauthorized attacker to execute code over an adjacent network.
- CVE-2026-33827High
A race condition vulnerability in the Windows TCP/IP stack allows an unauthorized attacker to execute code remotely over a network.
- CVE-2024-38045High
Remote code execution vulnerability in Windows TCP/IP stack. An attacker could exploit this flaw to execute code remotely.
- CVE-2024-21416High
Remote code execution vulnerability in Windows TCP/IP stack. It allows an attacker to execute code remotely.
- CVE-2021-34490High
Denial of service vulnerability in Windows TCP/IP driver. Could cause system crash.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

