EUVD-2026-73023
GHSA-h3jj-c6v2-c99r
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
TCP/IP stack processes unauthenticated inbound traffic by default; memory exhaustion yields availability-only impact with no C or I component.
Primary rating from Vendor (microsoft).
CVSS VectorVendor: microsoft
Lifecycle Timeline
4DescriptionCVE.org
Missing release of memory after effective lifetime in Windows TCP/IP allows an unauthorized attacker to deny service over a network.
AnalysisAI
Remote denial-of-service in the Windows TCP/IP kernel stack allows an unauthenticated network attacker to exhaust kernel memory by sending crafted packets that trigger a memory allocation without a corresponding release (CWE-401), ultimately crashing or severely degrading affected systems. Affected releases span Windows Server 2022 and 2025, as well as Windows 11 versions 23H2 through 26H1, all with fixed builds published in the Microsoft Security Response Center update guide. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | No special authentication, session, or configuration is required - the CVSS vector PR:N/AC:L/UI:N indicates remote unauthenticated exploitation against the default Windows TCP/IP stack, which processes inbound network packets on every affected Windows system with any active network interface. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 7.5 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) is well-calibrated: the vulnerability is network-reachable without authentication, requires no special complexity, and delivers high availability impact while correctly assigning no confidentiality or integrity consequence. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the Microsoft-released cumulative security update for the affected Windows build, as documented in the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69588. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory all Windows Server 2022/2025 deployments and Windows 11 systems (23H2-26H1) in your environment and assess which are exposed to untrusted networks. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-401 – Memory Leak
View allShare
External POC / Exploit Code
Leaving vuln.today