EUVD-2026-100095

Heap-based buffer overflow in Windows Secure Socket Tunneling Protocol SSTP allows an authorized attacker to elevate privileges locally...

PT-2026-112858

Name of the Vulnerable Software and Affected Versions Windows Secure Socket Tunneling Protocol SSTP affected versions not specified Description A use after free issue in the Windows Secure Socket Tunneling Protocol SSTP allows an unauthorized remote attacker to execute arbitrary code over a netwo...

CVE-2026-88147: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Secure Socket Tunneling Protocol SSTP allows an authorized attacker to elevate privileges locally...

CVE-2026-73009

Use after free in Windows Secure Socket Tunneling Protocol SSTP allows an unauthorized attacker to execute code over a network...

CVE-2026-72930

Use after free in Windows Secure Socket Tunneling Protocol SSTP allows an authorized attacker to execute code locally...

CVE-2026-72931

Missing release of resource after effective lifetime in Windows Secure Socket Tunneling Protocol SSTP allows an authorized attacker to deny service locally...

CVE-2026-71332

Use after free in Windows Secure Socket Tunneling Protocol SSTP allows an authorized attacker to elevate privileges locally...

EUVD-2026-73773

Use after free in Windows Secure Socket Tunneling Protocol SSTP allows an unauthorized attacker to execute code over a network...

CVE-2026-73009

This use-after-free vulnerability affects Windows Secure Socket Tunneling Protocol (SSTP) , allowing an unauthorized attacker to achieve remote code execution over a network with low attack complexity and no required privileges or user interaction . The CVSS 3.1 score is 9.8 (Critical) with high ...

CVE-2026-72931

CVE-2026-72931 is a denial-of-service vulnerability in Windows Secure Socket Tunneling Protocol (SSTP) , caused by a missing release of a resource after its effective lifetime . An authorized local attacker with low privileges can trigger the condition, resulting in a high availability impact but...

EUVD-2026-73663

Missing release of resource after effective lifetime in Windows Secure Socket Tunneling Protocol SSTP allows an authorized attacker to deny service locally...

EUVD-2026-73107

Use after free in Windows Secure Socket Tunneling Protocol SSTP allows an authorized attacker to execute code locally...

CVE-2026-72930

CVE-2026-72930 is a use-after-free vulnerability in Windows Secure Socket Tunneling Protocol (SSTP) that allows an authorized attacker to execute code locally. The CVSS 3.1 score is 7.0 (HIGH) , reflecting a local attack vector with high complexity, low privileges required, no user interaction, a...

EUVD-2026-73093

Use after free in Windows Secure Socket Tunneling Protocol SSTP allows an authorized attacker to elevate privileges locally...

CVE-2026-71332

CVE-2026-71332 is a use-after-free vulnerability in Windows Secure Socket Tunneling Protocol (SSTP) that allows an authorized attacker to perform a local privilege escalation . The CVSS 3.1 score is 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a high-attack-complexi...

Windows Secure Socket Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability

Use after free in Windows Secure Socket Tunneling Protocol SSTP allows an authorized attacker to elevate privileges locally...

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

Use after free in Windows Secure Socket Tunneling Protocol SSTP allows an authorized attacker to execute code locally...

Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability

Missing release of resource after effective lifetime in Windows Secure Socket Tunneling Protocol SSTP allows an authorized attacker to deny service locally...

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

Use after free in Windows Secure Socket Tunneling Protocol SSTP allows an unauthorized attacker to execute code over a network...

PT-2026-87848

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A use after free issue in the Secure Socket Tunneling Protocol SSTP allows an authorized attacker to execute arbitrary code locally and affect the system. Use after free is a memory corruptio...