Nov 2026: Windows TCP/IP Remote Code Execution Vulnerability
CVE-2026-113859 Published on November 10, 2026

Windows TCP/IP Remote Code Execution Vulnerability
Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over an adjacent network.

Vendor Advisory NVD

Vulnerability Analysis

Exploitation:

NONE

Automatable:

Technical Impact:

TOTAL

Weakness Type

What is a Dangling pointer Vulnerability?

Referencing memory after it has been freed can cause a program to crash, use unexpected values, or execute code.

CVE-2026-113859 has been classified to as a Dangling pointer vulnerability or weakness.

Products Associated with CVE-2026-113859

Want to know whenever a new CVE is published for Microsoft products? stack.watch will email you.

Microsoft Windows 11 24h2

Microsoft Windows 11 25h2

Microsoft Windows 11 Version 26h2 X64 Based Systems

Microsoft Windows Server 2025

Microsoft Windows 11 26h1

Affected Versions

Microsoft Windows 11 Version 24H2:

Version 10.0.26100.0 and below 10.0.26100.9974 is affected.

Microsoft Windows 11 Version 25H2:

Version 10.0.26200.0 and below 10.0.26200.9974 is affected.

Microsoft Windows 11 version 26H1:

Version 10.0.28000.0 and below 10.0.28000.3501 is affected.

Microsoft Windows 11 Version 26H2:

Version 10.0.26300.0 and below 10.0.26300.9974 is affected.

Microsoft Windows Server 2025:

Version 10.0.26100.0 and below 10.0.26100.33822 is affected.

Microsoft Windows Server 2025 (Server Core installation):

Version 10.0.26100.0 and below 10.0.26100.33822 is affected.

Exploit Probability

EPSS

0.42%

Percentile

37.08%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.