← Back to search

CVE-2026-83862

9.8 CRITICAL

Published 2026-10-13 · Updated 2026-10-14

AI risk analysis

Summary
A use-after-free vulnerability in Windows Network Load Balancing allows remote attackers to execute arbitrary code with high privileges. This flaw occurs when the system frees memory that is still being referenced, potentially leading to memory corruption and code execution.
Exploitability
Exploitation appears moderately difficult as it requires a network-based attack against a vulnerable Windows NLB service, but the critical CVSS score suggests reliable remote code execution is achievable with proper conditions.
Blast radius
The impact could be severe across enterprise networks that rely on NLB for load distribution, potentially allowing attackers to compromise entire network infrastructure and escalate privileges across multiple systems.
Detection
No reliable host or network indicator is derivable from the published description.
Prioritized remediation
Apply the Windows Update KB5042838 or later patch immediately to address this vulnerability in all affected NLB implementations.
rcenetworkprivilege-escalationwindows

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

Use after free in Windows Network Load Balancing allows an unauthorized attacker to execute code over a network.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-416

All references

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

Related by shared AI tags and CWE weakness class. Browse the full archive.