CVE-2026-62893

Microsoft Windows Server 2012 CWE-416

Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network.

CVSS Score

9.8

Critical

EPSS — Exploit Probability

1.0%

Riskier than 60% of all CVEs · checked 2026-09-25

Exploitation

Not in CISA KEV

KEV does not include every exploited vulnerability

Remediation

Patch available

Vendor fix published

2 articles across 2 outlets · first covered Aug 12, 2026 · latest Sep 9, 2026

Associated threat actors