Heap-based buffer overflow in Windows RNDIS allows an unauthorized attacker to disclose information with a physical attack

What this means

This is rated medium severity (4.6 out of 10). There is no confirmed exploitation of it yet. Ask IT whether Microsoft Windows 10 1607, Microsoft Windows 10 1809 and Microsoft Windows 10 21h2, and 10 more are in your estate.

Scoring and exploitation

Estimated attack likelihood

~0.5% estimated chance of attack in 30 daysModel estimate (EPSS): a probability signal, not confirmed exploitation

Exploited in the wild

Not confirmed in the known-exploited catalogue

Known ransomware use

Not reported

Weaknesses (CWE)

Affected products (CPE)

• Microsoft Windows 10 1607
• Microsoft Windows 10 1809
• Microsoft Windows 10 21h2
• Microsoft Windows 10 22h2
• Microsoft Windows 11 23h2
• Microsoft Windows 11 24h2
• Microsoft Windows 11 25h2
• Microsoft Windows 11 26h1
• Microsoft Windows Server 2012
• Microsoft Windows Server 2016
• Microsoft Windows Server 2019
• Microsoft Windows Server 2022
• Microsoft Windows Server 2025

References

1 link from the CVE record, grouped by site; the vendor's advisory comes first.

• msrc.microsoft.com1 linkVendor advisory

  • CVE-2026-69548 (opens in a new tab)Patch · Vendor Advisory