CVE-2026-45657

—

CVSS 3.1

9.8 critical

EPSS

15%p97

Published

Jun 9, 2026 (Jun 9, 2026)

Modified

Jul 23, 2026

Description

Use after free in Windows Kernel allows an unauthorized attacker to execute code over a network.

Vendors: microsoft
Products: windows 11 23h2, windows 11 24h2, windows 11 25h2, windows 11 26h1, windows server 2022, windows server 2025
Weakness: CWE-122, CWE-416
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (15.5%)

In the news4 stories

Microsoft Patches Record 206 Flaws, Including Three Zero

The Hacker NewsJun 12, 05:35 UTC · Jun 12, 2026Vulnerability CVE-2025-10263 CVE-2026-8863 CVE-2026-45657+9 CVEs

60

Microsoft ships largest Patch Tuesday on record, with one bug under active attack

The RecordJun 10, 13:03 UTC · Jun 10, 2026Vulnerability in the wildCVE-2026-45657 CVE-2026-41091 CVE-2026-505071

60

Microsoft Releases Record

Security AffairsJun 9, 22:56 UTC · Jun 9, 2026Exploit / PoC in the wildCVE-2026-41091 CVE-2026-45657 CVE-2026-47291+5 CVEs1

60

Microsoft Patch Tuesday for June 2026 — Snort rules and prominent vulnerabilities

Cisco TalosJun 9, 21:21 UTC · Jun 9, 2026Vulnerability CVE-2026-42985 CVE-2026-47291 CVE-2026-44803+26 CVEs

60