CVE-2026-54995

CriticalCVSS 9.8/10Last modified Jul 20, 2026

Description

Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

No affected versions have been published.

Timeline

Published
Jul 14, 2026
Last modified
Jul 20, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-549967.0Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorizedCVE-2026-549975.5Use of uninitialized resource in Windows SMB allows an authorized attacker to disclose information locally.CVE-2026-549988.8Incorrect authorization in Microsoft Exchange Online allows an authorized attacker to elevate privileges over a network.CVE-2026-549998.8Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an unauthorized attackeCVE-2026-55005.9wolfSSL's wc_PKCS7_DecodeAuthEnvelopedData() does not properly sanitize the AES-GCM authentication tag length received and has no lower bounCVE-2026-550006.4Use after free in Windows USB Print Driver allows an unauthorized attacker to elevate privileges with a physical attack.CVE-2026-550017.8Improper certificate validation in Windows Active Directory allows an authorized attacker to elevate privileges locally.CVE-2026-550028.8External control of file name or path in SQL Server allows an authorized attacker to elevate privileges over a network.CVE-2026-550036.5Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network.CVE-2026-550047.8Double free in Microsoft Printer Drivers allows an authorized attacker to elevate privileges locally.CVE-2026-550058.8Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to execute code over a network.CVE-2026-550067.8Insufficient granularity of access control in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.
CVE-2026-54995: Critical severity, CVSS 9.8 | Vulnix