CVE-2026-72949 | Microsoft Windows up to Server 2025 Network Transport Driver srvnet.sys null pointer dereference

A vulnerability labeled as critical has been found in Microsoft Windows up to Server 2025. The affected element is an unknown function of the file srvnet.sys of the component Network Transport Driver. The manipulation results in null pointer dereference.

This vulnerability is identified as CVE-2026-72949. The attack can be executed remotely. There is not any exploit available.

It is advisable to implement a patch to correct this issue.VulDB Recent EntriesRead More