CVE-2026-88147

A heap-based buffer overflow exists in the Windows Secure Socket Tunneling Protocol (SSTP) . This vulnerability allows an authorized attacker to perform a local privilege escalation . The impact includes high levels of confidentiality, integrity, and availability loss as reported in the CVSS metr...

CVE-2026-85926

A Use after free vulnerability exists in the Windows Secure Socket Tunneling Protocol (SSTP) . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 8.1 (High) , with high impact across confidentiality, integrity, and availability. Docume...

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

Use after free in Windows Secure Socket Tunneling Protocol SSTP allows an unauthorized attacker to execute code over a network...

CVE-2026-72931: Missing Release of Resource after Effective Lifetime

Missing release of resource after effective lifetime in Windows Secure Socket Tunneling Protocol SSTP allows an authorized attacker to deny service locally...

CVE-2026-73009: Use After Free

Use after free in Windows Secure Socket Tunneling Protocol SSTP allows an unauthorized attacker to execute code over a network...

CVE-2026-71332: Use After Free

Use after free in Windows Secure Socket Tunneling Protocol SSTP allows an authorized attacker to elevate privileges locally...

CVE-2026-72930: Use After Free

Use after free in Windows Secure Socket Tunneling Protocol SSTP allows an authorized attacker to execute code locally...

CVE-2026-62889: Double Free

Double free in Windows Secure Socket Tunneling Protocol SSTP allows an unauthorized attacker to execute code over a network...

CVE-2026-50694: Use After Free

Use after free in Windows Secure Socket Tunneling Protocol SSTP allows an unauthorized attacker to execute code over a network...

EUVD-2022-38640

Malicious code in bioql PyPI...

EUVD-2022-47610

Malicious code in bioql PyPI...

CVE-2022-35753: Undefined Security Weakness

Windows Secure Socket Tunneling Protocol SSTP Remote Code Execution Vulnerability...

CVE-2022-35745: Undefined Security Weakness

Windows Secure Socket Tunneling Protocol SSTP Remote Code Execution Vulnerability...

CVE-2022-35752: Undefined Security Weakness

Windows Secure Socket Tunneling Protocol SSTP Remote Code Execution Vulnerability...

CVE-2023-24903: Double Free

Windows Secure Socket Tunneling Protocol SSTP Remote Code Execution Vulnerability...

CVE-2023-28241: Undefined Security Weakness

Windows Secure Socket Tunneling Protocol SSTP Denial of Service Vulnerability...

CVE-2023-21548

Windows Secure Socket Tunneling Protocol SSTP Remote Code Execution Vulnerability...

CVE-2023-21548: Sensitive Data Storage in Improperly Locked Memory

Windows Secure Socket Tunneling Protocol SSTP Remote Code Execution Vulnerability...

CVE-2023-21535: Sensitive Data Storage in Improperly Locked Memory

Windows Secure Socket Tunneling Protocol SSTP Remote Code Execution Vulnerability...

PT-2023-1026 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows Secure Socket Tunneling Protocol SSTP affected versions not specified Description: The issue is related to errors in synchronization when using a shared resource in the implementation of the Secure Socket Tunneling Protocol SSTP in...