OTPulse

Windows TCP/IP Information Disclosure Vulnerability

MonitorCVSS 5.5CVE-2026-49177Jul 14, 2026
Microsoft
IT in OT - Windows Server and Active Directory are widely deployed in OT environments
Attack path
Attack VectorLocal
Auth RequiredLow
ComplexityLow
User InteractionNone needed
Summary

Out-of-bounds read in Windows TCP/IP allows an authorized local attacker to disclose information. The vulnerability is in TCP/IP stack memory handling and requires local access with user-level privileges.

What this means
What could happen
A local user on a Windows system could read sensitive TCP/IP stack memory, potentially exposing network configuration details or other system information.
Who's at risk
Windows administrators managing Windows 10 (versions 1607, 1809, 21H2, 22H2), Windows 11 (versions 24H2, 25H2, 26H1), Windows Server 2016, 2019, 2022, and 2025 systems need to assess exposure. This affects both 32-bit and x64 architectures as well as ARM64-based systems.
How it could be exploited
An attacker with a local user account on a Windows system could trigger an out-of-bounds read in the TCP/IP driver to access kernel memory without requiring administrative privileges.
Prerequisites
  • Local user account on the Windows system (non-administrator)
  • Ability to execute code or issue system calls locally
No authentication required (already has local user access)Low complexity exploit
Exploitability
Unlikely to be exploited — EPSS score 0.4%
Affected products (23)
23 with fix
ProductAffected VersionsFix Status
Windows 10 Version 1809 for 32-bit SystemsAll versionsBuild 10.0.17763.9020
Windows 10 Version 1809 for x64-based SystemsAll versionsBuild 10.0.17763.9020
Windows Server 2019All versionsBuild 10.0.17763.9020
Windows Server 2019 (Server Core installation)All versionsBuild 10.0.17763.9020
Windows Server 2022All versionsBuild 10.0.20348.5386
Remediation & Mitigation
0/9
Schedule — requires maintenance window
0/9

Patching may require device reboot — plan for process interruption

Windows Server 2019
HOTFIXUpdate Windows Server 2019 to Build 10.0.17763.9020 or later
Windows Server 2022
HOTFIXUpdate Windows Server 2022 to Build 10.0.20348.5386 or later
Windows Server 2025
HOTFIXUpdate Windows Server 2025 to Build 10.0.26100.33158 or later
All products
HOTFIXUpdate Windows 10 Version 1809 (32-bit) to Build 10.0.17763.9020 or later
HOTFIXUpdate Windows 10 Version 1809 (x64) to Build 10.0.17763.9020 or later
HOTFIXUpdate Windows 10 Version 21H2 to Build 10.0.19044.7548 or later
HOTFIXUpdate Windows 10 Version 22H2 to Build 10.0.19045.7548 or later
HOTFIXUpdate Windows 11 Version 24H2 to Build 10.0.26100.8875 or later
HOTFIXUpdate Windows 11 Version 25H2 to Build 10.0.26200.8875 or later
View full vendor advisory
API: /api/v1/advisories/12c0fd14-15e8-49e3-a3d3-a595195b48bd

Get OT security insights every Tuesday

Advisory breakdowns, a weekly summary, and incident analyses for the people actually defending OT environments. Free, no account required.