Microsoft Windows TCP/IP Use-After-Free Vulnerability Allowing Information Disclosure

A use-after-free vulnerability has been identified in the Windows TCP/IP stack, which could allow an unauthorized attacker to disclose information over the network. This vulnerability affects several versions of Windows, including various editions of Windows Server, Windows 10, and Windows 11. The exploitation of this vulnerability could lead to the unauthorized disclosure of certain kernel memory contents.

Impact

Exploitation of this vulnerability could result in unauthorized information disclosure, specifically related to kernel memory contents.

Remediation

Users can apply the security update for this vulnerability, which is included in the May 2026 security updates. Instructions for downloading the security update are available on the Microsoft Update Catalog.