CVE-2026-72957

A heap-based buffer overflow vulnerability in Windows Deployment Services allows authorized attackers to execute arbitrary code locally on affected Windows systems. This high-severity flaw poses a significant risk to organizations utilizing Windows Deployment Services, as it could lead to unauthorized access and control over critical systems. Organizations should prioritize patching this vulnerability to mitigate potential exploitation risks.