CVE-2026-68886

Awaiting Analysis Awaiting Analysis - Queue

Use After Free in Windows Network Connection Broker

Publication date: 2026-09-08

Last updated on: 2026-09-08

Assigner: Microsoft Corporation

Description

Use after free in Windows Network Connection Broker allows an authorized attacker to disclose information locally.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-08

Last Modified

2026-09-08

Generated

2026-09-29

AI Q&A

2026-09-10

EPSS Evaluated

2026-09-27

NVD

CVE-2026-68886

Affected Vendors & Products

Vendor	Product	Version / Range
microsoft	windows_network_connection_broker	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-416	The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
CWE-209	The product generates an error message that includes sensitive information about its environment, users, or associated data.

Attack-Flow Graph

Executive Summary

This vulnerability is a use after free issue in the Windows Network Connection Broker component. It allows an authorized attacker to disclose information locally by exploiting a memory management flaw where freed memory is accessed improperly.

Impact Analysis

An attacker with local access could exploit this to read sensitive information from memory, potentially leading to data leaks or unauthorized access to system details.

Compliance Impact

This vulnerability could lead to unauthorized disclosure of personal or sensitive data, which may violate GDPR or HIPAA requirements for data protection and confidentiality.

Mitigation Strategies

Apply the latest security updates from Microsoft to patch the Windows Network Connection Broker component. Monitor Microsoft's security advisories for updates related to CVE-2026-68886.

Hi! I’m here to help you understand CVE-2026-68886. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70