CVE-2026-42915

Incorrect calculation of buffer size in Windows TCP/IP allows an authorized attacker to deny service over an adjacent network...

CVE-2026-40415

Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over a network...

CVE-2026-40405

Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over a network...

CVE-2026-40406

Use after free in Windows TCP/IP allows an unauthorized attacker to disclose information over a network...

Defense at AI speed: Microsoft’s new multi-model agentic security system tops leading industry benchmark

In this article 1. AI-powered vulnerability discovery at hyper-scale 2. Codename: MDASH—Microsoft Security’s new multi-model agentic scanning harness 3. Using codename MDASH for security research 4. The 5.12.2026 Patch Tuesday cohort 5. Two deep dives 1. CVE-2026-33827—Remote unauthenticated UAF ...

EUVD-2026-29665

Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over a network...

CVE-2026-40401

Windows TCP/IP Denial of Service Vulnerability...

CVE-2026-40415

Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over a network...

CVE-2026-40406

Use after free in Windows TCP/IP allows an unauthorized attacker to disclose information over a network...

PT-2026-40224

Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over an adjacent network...

CVE-2026-27921

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows TCP/IP allows an authorized attacker to elevate privileges locally...

CVE-2026-33827

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows TCP/IP allows an unauthorized attacker to execute code over a network...

PT-2025-36836

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: A time-of-check time-of-use toctou race condition exists in the Windows TCP/IP stack. This condition allows a locally authorized attacker to elevate privileges. The issue allows attackers t...

Microsoft Windows TCP/IP component 缓冲区错误漏洞

The Microsoft Windows TCP/IP component is a component of Microsoft Corporation USA that provides TCP/IP configuration capabilities for Windows. A buffer error vulnerability exists in the Microsoft Windows TCP/IP component. The following products and editions are affected: Windows 10 Version 2004...

PT-2020-4246 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: A denial of service issue exists due to the improper handling of ICMPv6 Router Advertisement packets by the Windows TCP/IP stack. This could allow an attacker to cause a target system to st...

CVE-2018-8493

An information disclosure vulnerability exists when the Windows TCP/IP stack improperly handles fragmented IP packets, aka "Windows TCP/IP Information Disclosure Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers...