{"@odata.context":"https://api.msrc.microsoft.com/sug/v2.0/sugodata/v2.0/en-US/$metadata#vulnerability/$entity","id":"00000000-0000-0000-0000-0000fd37c5db","releaseDate":"2026-10-13T07:00:00-07:00","cveNumber":"CVE-2026-83862","cveTitle":"Windows Network Load Balancing Remote Code Execution Vulnerability","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-23T07:00:00-07:00","description":"<p>Use after free in Windows Network Load Balancing allows an unauthorized attacker to execute code over an adjacent network.</p>\n","cweList":["CWE-416: Use After Free"],"cweDetailsListForSearch":["cwe: CWE-416: Use After Free","cweUrl: https://cwe.mitre.org/data/definitions/416.html"],"unformattedDescription":"<p>Use after free in Windows Network Load Balancing allows an unauthorized attacker to execute code over an adjacent network.</p>","mitreText":"CVE-2026-83862","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-83862","publiclyDisclosed":"No","exploited":"No","latestSoftwareReleaseId":2,"latestSoftwareRelease":"Exploitation Less Likely","olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Windows Network Load Balancing","issuingCna":"Microsoft","issuingCnaId":100000001,"severityId":100000001,"severity":"Important","impactId":100000005,"impact":"Remote Code Execution","langCode":"en-US","baseScore":"8.8","temporalScore":"7.7","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","vectorStringSource":"Microsoft","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-416: Use After Free","https://cwe.mitre.org/data/definitions/416.html"]}],"articles":[{"title":"Windows Network Load Balancing Remote Code Execution Vulnerability","articleType":"100000000","description":"<p>Use after free in Windows Network Load Balancing allows an unauthorized attacker to execute code over a network.</p>\n","ordinal":10000},{"title":"Windows Network Load Balancing Remote Code Execution Vulnerability","articleType":"100000000","description":"<p>Use after free in Windows Network Load Balancing allows an unauthorized attacker to execute code over an adjacent network.</p>\n","ordinal":10000},{"articleType":"FAQ","description":"<p><strong>How could an attacker exploit this vulnerability?</strong></p>\n<p>An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required..</p>\n","ordinal":10000}],"revisions":[{"cveNumber":"CVE-2026-83862","version":1.1,"revisionDate":"2026-10-23T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"<p>Corrected the CVSS Attack Vector metric from Network (AV:N) to Adjacent (AV:A) to reflect the requirement for Layer 2 network adjacency. The CVSS base score has decreased from 9.8 to 8.8. This is an informational change only. Customers who have successfully installed the update do not need to take any further action.</p>\n","unformattedDescription":"Corrected the CVSS Attack Vector metric from Network (AV:N) to Adjacent (AV:A) to reflect the requirement for Layer 2 network adjacency. The CVSS base score has decreased from 9.8 to 8.8. This is an informational change only. Customers who have successfully installed the update do not need to take any further action.","notificationNeeded":false,"notificationSent":false,"sourceId":"2e477606-08cf-f111-a059-000d3a369eb0"},{"cveNumber":"CVE-2026-83862","version":1,"revisionDate":"2026-10-13T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"<p>Information published.</p>\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"3294473e-94a5-f111-93a1-000d3ac5fb71"}]}