CVE-2026-33921

The Windows installer deployed Npcap leaving its access restriction option at the insecure default value, so the driver was accessible to every local user of the host instead of being restricted to administrators only. A local user without administrative privileges could use the Npcap driver to...

CVE-2026-33921 Npcap driver installed without administrator-only access restriction on Windows in Arc before v2.7.0

The Windows installer deployed Npcap leaving its access restriction option at the insecure default value, so the driver was accessible to every local user of the host instead of being restricted to administrators only. A local user without administrative privileges could use the Npcap driver to...

EUVD-2026-55995

The Windows installer deployed Npcap leaving its access restriction option at the insecure default value, so the driver was accessible to every local user of the host instead of being restricted to administrators only. A local user without administrative privileges could use the Npcap driver to...

CVE-2026-33921

CVE-2026-33921 maps to a Windows RPC Runtime (rpcrt4.dll) vulnerability where NdrComplexTypeBufferSize underflows, enabling a pre-auth heap-based overflow (Ghost-Call) via RPC/SMB without credentials. Impact: potential remote code execution with SYSTEM privileges on affected Windows hosts; exploi...