Windows Network Connection Broker
by Microsoft
CVEs (4)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-72967 | Hig | 0.51 | 7.8 | 0.00 | Sep 8, 2026 | Heap-based buffer overflow in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally. | ||
| CVE-2020-1526 | Hig | 0.51 | 7.8 | 0.01 | Aug 17, 2020 | An elevation of privilege vulnerability exists when the Windows Network Connection Broker improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to… | ||
| CVE-2026-61366 | Hig | 0.46 | 7.0 | 0.00 | Aug 11, 2026 | Double free in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-68886 | Med | 0.36 | 5.5 | 0.00 | Sep 8, 2026 | Use after free in Windows Network Connection Broker allows an authorized attacker to disclose information locally. |
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when the Windows Network Connection Broker improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to…
- risk 0.46cvss 7.0epss 0.00
Double free in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally.
- risk 0.36cvss 5.5epss 0.00
Use after free in Windows Network Connection Broker allows an authorized attacker to disclose information locally.