CVE-2026-72954

A use-after-free vulnerability in Windows Deployment Services allows an authenticated attacker to execute arbitrary code remotely over a network. This high-severity flaw poses a significant risk to organizations utilizing Windows for deployment services, particularly those with exposed network configurations. IT and security teams should prioritize patching this vulnerability to mitigate potential exploitation.