PT-2026-58243 · Microsoft · Windows Tcp/Ip+1

CVE-2026-54999 · Published 2026-07-14 · Updated 2026-07-14

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Windows TCP/IP (affected versions not specified)

Description A race condition occurs in Windows TCP/IP due to improper synchronization when using a shared resource. This allows an unauthorized attacker located on an adjacent network to execute arbitrary code.

Recommendations Apply the July updates to resolve this issue.

Fix

RCE

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

CVE-2026-54999

Affected Products

Windows

Windows Tcp/Ip

References · 5

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54999 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-54999 · Security Note
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54999 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-54999 · Vendor Advisory
• https://twitter.com/windowsforum/status/2077153705598566406 · Twitter Post