CVE-2026-40401

Published: Mag 12, 2026 Last Modified: Mag 12, 2026

ExploitDB:

Other exploit source:

Google Dorks:

HIGH 7,1

Source: [email protected]

Attack Vector: local

Attack Complexity: low

Privileges Required: none

User Interaction: none

Scope: changed

Confidentiality: none

Integrity: none

Availability: high

AI Translation Available

Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service locally.

476

Stable

Abstraction: Base Structure: Simple

Security Scopes Affected:

Availability Integrity Confidentiality

Potential Impacts:

Dos: Crash, Exit, Or Restart Execute Unauthorized Code Or Commands Read Memory Modify Memory

Languages: C, C#, C++, Go, Java

Likelihood of Exploit: Medium

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40401