CVE-2026-72954

Publié : 8 septembre 2026

Modifié : 8 septembre 2026

Lien officiel NVD

Score CVSS

7.5

HIGH

Description détaillée

Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network.

Vecteur d'attaque (CVSS)

Vecteur brut :CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Références et Patchs

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72954

Dernières Vulnérabilités

CVE-2026-87658

Information leak in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to obtain cross-origin data via a crafted Chrome extension. (Chromium security severity: Medium)

VOIR DÉTAILS

CVE-2026-87657

Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

VOIR DÉTAILS

CVE-2026-87656

Improper state validation in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)

VOIR DÉTAILS