{"id":"CVE-2026-83862","published":"2026-10-13T19:20:35.520","lastModified":"2026-10-14T04:18:42.487","description":"Use after free in Windows Network Load Balancing allows an unauthorized attacker to execute code over a network.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-416"],"vendors":[],"products":[],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83862","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A use-after-free vulnerability in Windows Network Load Balancing allows remote attackers to execute arbitrary code with high privileges. This flaw occurs when the system frees memory that is still being referenced, potentially leading to memory corruption and code execution.","exploitability":"Exploitation appears moderately difficult as it requires a network-based attack against a vulnerable Windows NLB service, but the critical CVSS score suggests reliable remote code execution is achievable with proper conditions.","blast_radius":"The impact could be severe across enterprise networks that rely on NLB for load distribution, potentially allowing attackers to compromise entire network infrastructure and escalate privileges across multiple systems.","remediation":"Apply the Windows Update KB5042838 or later patch immediately to address this vulnerability in all affected NLB implementations.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","network","privilege-escalation","windows"],"model":"garnet-coder","analyzedAt":"2026-10-14T08:49:43.197Z"}}