CVE record · 3 sources
CVE-2026-113859
CVSS 7.5Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over an adjacent network.
- Vendor
- Microsoft
- Product
- Windows 11 Version 24H2, Windows 11 Version 25H2, Windows 11 version 26H1, Windows 11 Version 26H2
- CVSS v3.1
- 7.5 AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 0.002 (p14)
- Weakness
- CWE-416
- Exposure class
- Browser, Operating system
Coverage
3Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Microsoft Patch Tuesday November 2027
Microsoft continues its AI-induced patch surge, addressing 1,260 different vulnerabilities this month. 68 of these vulnerabilities are considered critical. 167 of the vulnerabilities are Chromium issues affecting Microsoft Edge.
-
Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over an adjacent network.
Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over an adjacent network.
-
Microsoft Patch Tuesday, November 2026 Security Update Review
As the year approaches its final stretch, Microsoft’s November 2026 Patch Tuesday highlights the continued importance of proactive vulnerability management. This month’s security updates address vulnerabilities across the…