← Back

CVE-2026-40401

nvd nist
Published: May 12, 2026Modified: Jun 17, 2026

JSON object

Loading...
7.1
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Exploitability: 2.5 / Impact: 4.0
Source: secure@microsoft.com (Secondary)

Description

Windows TCP/IP Denial of Service Vulnerability

Affected (19)

Microsoft
14 products
Windows 10 1607
Windows 10 1809
Windows 10 21h2
Windows 10 22h2
Windows 11 23h2
Windows 11 24h2
Windows 11 25h2
Windows 11 26h1
Windows Server 2012
Windows Server 2016
Windows Server 2019
Windows Server 2022
Windows Server 2022 23h2
Windows Server 2025
Configuration A
19 vulnerable
Vulnerable SoftwareAffected Versions
Windows 10 1607
version < 10.0.14393.9140
Windows 10 1809
version < 10.0.17763.8755
Windows 10 21h2
version < 10.0.19044.7291
Windows 10 22h2
version < 10.0.19045.7291
Microsoft
Windows 11 23h2
version < 10.0.22631.7079
Windows 11 23h2
version < 10.0.22631.7079
Microsoft
Windows 11 24h2
version < 10.0.26100.8390
Windows 11 24h2
version < 10.0.26100.8390
Microsoft
Windows 11 25h2
version < 10.0.26200.8390
Windows 11 25h2
version < 10.0.26200.8390
Microsoft
Windows 11 26h1
version < 10.0.28000.2113
Windows 11 26h1
version < 10.0.28000.2113
Microsoft
Windows Server 2012
All versions
Windows Server 2012
Version r2
Windows Server 2016
version < 10.0.14393.9140
Windows Server 2019
version < 10.0.17763.8755
Windows Server 2022
version < 10.0.20348.5074
Windows Server 2022 23h2
version < 10.0.25398.2330
Windows Server 2025
version < 10.0.26100.32772

Related CWEs

CWE-476
NULL Pointer Dereference
The product dereferences a pointer that it expects to be valid but is NULL.

References (1)

Source: secure@microsoft.com
Vendor Advisory

Timeline

No history available yet.