CVE-2026-83862
9.8 CRITICALPublished 2026-10-13 · Updated 2026-10-14
AI risk analysis
- Summary
- A use-after-free vulnerability in Windows Network Load Balancing allows remote attackers to execute arbitrary code with high privileges. This flaw occurs when the system frees memory that is still being referenced, potentially leading to memory corruption and code execution.
- Exploitability
- Exploitation appears moderately difficult as it requires a network-based attack against a vulnerable Windows NLB service, but the critical CVSS score suggests reliable remote code execution is achievable with proper conditions.
- Blast radius
- The impact could be severe across enterprise networks that rely on NLB for load distribution, potentially allowing attackers to compromise entire network infrastructure and escalate privileges across multiple systems.
- Detection
- No reliable host or network indicator is derivable from the published description.
- Prioritized remediation
- Apply the Windows Update KB5042838 or later patch immediately to address this vulnerability in all affected NLB implementations.
rcenetworkprivilege-escalationwindows
Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.
NVD description
Use after free in Windows Network Load Balancing allows an unauthorized attacker to execute code over a network.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-416
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- CRITICALCVE-2026-100202
- CRITICALCVE-2026-83693
- CRITICALCVE-2026-83748
- CRITICALCVE-2026-85928
- CRITICALCVE-2026-97815
- CRITICALCVE-2026-0163
- HIGHCVE-2026-102214
- HIGHCVE-2026-47505PoC
Related by shared AI tags and CWE weakness class. Browse the full archive.