Summary
Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.
Details
According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?
Successful exploitation of this vulnerability requires an attacker to win a race condition.
Security updates
10.0.14393.9688 — https://support.microsoft.com/help/5131291
10.0.17763.9487 — https://support.microsoft.com/help/5131085
10.0.19044.7846 — https://support.microsoft.com/help/5131096
10.0.22631.7711 — https://support.microsoft.com/help/5131087
10.0.26100.33822 — https://support.microsoft.com/help/5131080
10.0.26100.33730 — https://support.microsoft.com/help/5131077
10.0.28000.3501 — https://support.microsoft.com/help/5132059
10.0.20348.5870 — https://support.microsoft.com/help/5131090
10.0.26100.9974 — https://support.microsoft.com/help/5132061
10.0.26100.9911 — https://support.microsoft.com/help/5132043
Vulnerabilities 1
-
High 7.5
Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability
Use after free in Windows Link Layer Topology Discovery Protocol allows an unauthorized attacker to execute code over an adjacent network.
Revision history
-
#1
Information published.
References
-
CVE-2026-88244 Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88244
-
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
-
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
-
Common Vulnerability Scoring System
https://www.first.org/cvss