Product:
Windows TCP/IP
Summary
A null pointer dereference vulnerability in Windows TCP/IP allows an unauthorized attacker to cause a denial of service over an adjacent network. This can lead to significant disruption of services. The issue arises from improper handling of certain network requests.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.4 | CVE-2026-40413 |
Exploitation
To exploit this vulnerability, an attacker on an adjacent network can send specially crafted packets to the affected system. By triggering the null pointer dereference, the attacker can cause the system to crash or become unresponsive, leading to a denial of service for legitimate users.
Affected Products
- Windows TCP/IP: Vulnerable to denial of service attacks due to null pointer dereference.
Mitigation
To mitigate this vulnerability, users should apply the latest security updates provided by Microsoft. Additionally, network segmentation and monitoring can help reduce the risk of exploitation by limiting access to affected systems.