CVE-2026-42904 | Microsoft Windows up to Server 2025 TCP/IP heap-based overflow

June 9, 2026 Yanac

A vulnerability has been found in Microsoft Windows up to Server 2025 and classified as very critical. This vulnerability affects unknown code of the component TCPIP. Performing a manipulation results in heap-based buffer overflow.

This vulnerability was named CVE-2026-42904. The attack needs to be approached within the local network. There is no available exploit.

The affected component should be upgraded.VulDB Recent EntriesRead More