CVE-2026-85806
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk60th percentile - higher than 60% of all known CVEs
Summary
Integer underflow (wrap or wraparound) in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.
Risk Assessment
An attacker could exploit this vulnerability to execute code, potentially leading to system integrity compromise and data access.
Recommendation
Apply Windows updates from Microsoft to remediate this vulnerability.
Other vulnerabilities in Network Policy Server
See all- CVE-2026-100222Critical
Heap-based buffer overflow in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.
- CVE-2026-85811High
Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over an adjacent network.
- CVE-2026-83655High
Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to deny service over a network.
Original NVD description (English source)
Integer underflow (wrap or wraparound) in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS