CVE-2026-83862

9.8Critical

Published 13 Oct 2026 · NVD status: Awaiting Analysis · AI triage by gemini-3.8-flash

9.8Critical

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: None
Impact: Full C/I/A compromise
Weakness: CWE-416

Impact

Unauthenticated attackers can execute arbitrary code remotely over the network with system privileges. They only need network access to systems running the Windows Network Load Balancing feature.

Root cause

A use-after-free flaw exists in the Windows Network Load Balancing component.

Affected systems

Versions not listed — check the vendor advisory.

CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Fix & remediation

Apply the vendor security update from the Microsoft advisory; if patching must wait, disable the Network Load Balancing feature or restrict network access to NLB cluster nodes.

shell

$ Get-WindowsFeature -Name NLB

AI-suggested. Run it in staging first and check it against the vendor advisory. Why?

Ad · In-content banner

NVD description

Use after free in Windows Network Load Balancing allows an unauthorized attacker to execute code over a network.

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83862

Source: nvd.nist.gov/vuln/detail/CVE-2026-83862