CVE-2026-40401

Description

Windows TCP/IP Denial of Service Vulnerability. According to the CVSS metric, a successful exploitation could lead to a scope change (S:C). What does this mean for this vulnerability? In this case, a successful attack could be performed from a low privilege Hyper-V guest. The attacker could traverse the guest's security boundary to cause denial of service on the Hyper-V host environment.

Affected Products

• ▸Windows 10 Version 1809 for x64-based Systems
• ▸Windows Server 2019
• ▸Windows Server 2019 (Server Core installation)
• ▸Windows Server 2022

CVSS Vector