CVE-2026-100222
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk61th percentile - higher than 61% of all known CVEs
Summary
Heap-based buffer overflow in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.
Risk Assessment
An attacker can remotely execute code, potentially leading to network or system integrity compromise.
Recommendation
Install the latest security updates from Microsoft.
Other vulnerabilities in Network Policy Server
See all- CVE-2026-85806Critical
Integer underflow (wrap or wraparound) in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.
- CVE-2026-85811High
Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over an adjacent network.
- CVE-2026-83655High
Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to deny service over a network.
Original NVD description (English source)
Heap-based buffer overflow in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS