Product:
Windows TCP/IP
Summary
A null pointer dereference vulnerability in Windows TCP/IP allows an unauthorized attacker to cause a denial of service locally. This can lead to significant disruption of services. The issue arises from improper handling of certain inputs, which can be exploited to crash the system.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.1 | CVE-2026-40401 |
Exploitation
To exploit this vulnerability, an attacker must have local access to the affected system. By sending specially crafted packets to the TCP/IP stack, the attacker can trigger the null pointer dereference, leading to a denial of service. This requires no special privileges or user interaction, making it relatively easy for an attacker with local access to execute.
Affected Products
- Windows TCP/IP: Vulnerable to denial of service due to null pointer dereference.
Mitigation
To mitigate this vulnerability, it is recommended to apply the latest security updates provided by Microsoft. Regularly updating systems and monitoring for unusual activity can also help reduce the risk of exploitation. Users should ensure that only authorized personnel have local access to critical systems.