VULNERABILITY INTELLIGENCE

CVE-2026-40399

CVSS score7.8 HIGH

EPSS probability0.33%

CISA KEVNot currently listed

Published2026-05-12

Last modified2026-06-17

Description

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevate privileges locally.