📧 info@ciso.sa | 📱 +966550939344 | Riyadh, Kingdom of Saudi Arabia
🔧 Scheduled Maintenance — Saturday 2:00-4:00 AM AST. Some features may be temporarily unavailable.    ●   
💎
Pro Plan 50% Off Unlock all AI features, unlimited reports, and priority support. Upgrade
Search Center
ESC to close
Global phishing Cross-sector HIGH 2h Global apt Education CRITICAL 1h Global vulnerability Enterprise Software / ERP Systems CRITICAL 2h Global vulnerability IT Infrastructure CRITICAL 3h Global vulnerability Technology and Software Development HIGH 4h Global vulnerability Enterprise IT and Government CRITICAL 4h Global ransomware Multiple Sectors / Enterprise CRITICAL 5h Global general Technology and Legal MEDIUM 6h Global ransomware Financial Services / Cryptocurrency CRITICAL 6h Global general Industrial Control Systems / Operational Technology HIGH 7h Global phishing Cross-sector HIGH 2h Global apt Education CRITICAL 1h Global vulnerability Enterprise Software / ERP Systems CRITICAL 2h Global vulnerability IT Infrastructure CRITICAL 3h Global vulnerability Technology and Software Development HIGH 4h Global vulnerability Enterprise IT and Government CRITICAL 4h Global ransomware Multiple Sectors / Enterprise CRITICAL 5h Global general Technology and Legal MEDIUM 6h Global ransomware Financial Services / Cryptocurrency CRITICAL 6h Global general Industrial Control Systems / Operational Technology HIGH 7h Global phishing Cross-sector HIGH 2h Global apt Education CRITICAL 1h Global vulnerability Enterprise Software / ERP Systems CRITICAL 2h Global vulnerability IT Infrastructure CRITICAL 3h Global vulnerability Technology and Software Development HIGH 4h Global vulnerability Enterprise IT and Government CRITICAL 4h Global ransomware Multiple Sectors / Enterprise CRITICAL 5h Global general Technology and Legal MEDIUM 6h Global ransomware Financial Services / Cryptocurrency CRITICAL 6h Global general Industrial Control Systems / Operational Technology HIGH 7h
Vulnerabilities

CVE-2026-40414

High
CWE-476 — Weakness Type
Published: May 12, 2026  ·  Modified: May 19, 2026  ·  Source: NVD
CVSS v3
7.4
🔗 NVD Official
📄 Description (English)

Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over an adjacent network.

🤖 AI Executive Summary

A null pointer dereference vulnerability in Windows TCP/IP stack allows attackers on adjacent networks to cause denial of service. The vulnerability requires network proximity but no authentication, making it a significant availability risk.

📄 Description (Arabic)

ثغرة في مكدس بروتوكول TCP/IP في نظام Windows تسمح بحدوث إلغاء مؤشر فارغ عند معالجة حزم شبكية معينة. يمكن للمهاجمين في الشبكات المجاورة استغلال هذه الثغرة لإحداث انهيار الخدمة دون الحاجة إلى بيانات اعتماد.

🤖 ملخص تنفيذي (AI)

ثغرة إلغاء مؤشر فارغ في مكدس TCP/IP في Windows تسمح للمهاجمين في الشبكات المجاورة بإحداث حالة عدم توفر الخدمة. تتطلب الثغرة القرب من الشبكة فقط دون مصادقة، مما يجعلها خطرًا كبيرًا على التوفر.

🤖 AI Intelligence Analysis Analyzed: May 19, 2026 13:48
🇸🇦 Saudi Arabia Impact Assessment
Saudi Relevance: high
🏢 Affected Saudi Sectors
banking telecom energy government healthcare
🎯 MITRE ATT&CK Techniques
⚖️ Saudi Risk Score (AI)
7.0
/ 10.0
🔧 Remediation Steps (English)
Apply Windows security updates immediately. Implement network segmentation to restrict adjacent network access. Deploy intrusion detection systems to monitor for exploitation attempts. Consider disabling unnecessary TCP/IP services if not required for operations.
🔧 خطوات المعالجة (العربية)
تطبيق تحديثات أمان Windows فورًا. تنفيذ تقسيم الشبكة لتقييد الوصول من الشبكات المجاورة. نشر أنظمة الكشف عن الاختراق لمراقبة محاولات الاستغلال. النظر في تعطيل خدمات TCP/IP غير الضرورية إذا لم تكن مطلوبة للعمليات.
📋 Regulatory Compliance Mapping
🟢 NCA ECC 2024
5.1 5.2 5.3
🔵 SAMA CSF
ID.BE-5 PR.IP-1 DE.CM-1
🟡 ISO 27001:2022
A.12.6.1 A.14.2.1
📦 Affected Products / CPE 19 entries
microsoft:windows_10_1607
microsoft:windows_10_1809
microsoft:windows_10_21h2
microsoft:windows_10_22h2
microsoft:windows_11_23h2
microsoft:windows_11_23h2
microsoft:windows_11_24h2
microsoft:windows_11_24h2
microsoft:windows_11_25h2
microsoft:windows_11_25h2
microsoft:windows_11_26h1
microsoft:windows_11_26h1
microsoft:windows_server_2012:-
microsoft:windows_server_2012:r2
microsoft:windows_server_2016
microsoft:windows_server_2019
microsoft:windows_server_2022
microsoft:windows_server_2022_23h2
microsoft:windows_server_2025
📊 CVSS Score
7.4
/ 10.0 — High
📊 CVSS Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Attack VectorA — Adjacent
Attack ComplexityL — Low / Local
Privileges RequiredN — None / Network
User InteractionN — None / Network
ScopeC — Changed
ConfidentialityN — None / Network
IntegrityN — None / Network
AvailabilityH — High
📋 Quick Facts
Severity High
CVSS Score7.4
CWECWE-476
EPSS0.12%
Exploit No
Patch ✗ No
Published 2026-05-12
Source Feed nvd
🇸🇦 Saudi Risk Score
7.0
/ 10.0 — Saudi Risk
Priority: HIGH
🏷️ Tags
CWE-476
Share this CVE
📣 Found this valuable?
Share it with your cybersecurity network
in LinkedIn 𝕏 X / Twitter 💬 WhatsApp ✈ Telegram
🍪 Privacy Preferences
CISO Consulting — Compliant with Saudi Personal Data Protection Law (PDPL)
We use cookies and similar technologies to provide the best experience on our platform. You can choose which types you accept.
🔒
Essential Always On
Required for the website to function properly. Cannot be disabled.
📋 Sessions, CSRF tokens, authentication, language preferences
📊
Analytics
Help us understand how visitors use the site and improve performance.
📋 Page views, session duration, traffic sources, performance metrics
⚙️
Functional
Enable enhanced features like content personalization and preferences.
📋 Dark/light theme, font size, custom dashboards, saved filters
📣
Marketing
Used to deliver content and ads relevant to your interests.
📋 Campaign tracking, retargeting, social media analytics
Privacy Policy →
CISO AI Assistant
Ask anything · Documents · Support
🔐

Introduce Yourself

Enter your details to access the full assistant

Your info is private and never shared
💬
CyberAssist
Online · responds in seconds
5 / 5
🔐 Verify Your Identity

Enter your email to receive a verification code before submitting a support request.

Enter to send · / for commands 0 / 2000
CISO AI · Powered by Anthropic Claude
✦ Quick Survey Help Us Improve CISO Consulting Your feedback shapes the future of our platform — takes less than 2 minutes.
⚠ Please answer this question to continue

How would you rate your overall experience with our platform?

Rate from 1 (poor) to 5 (excellent)

🎉
Thank you!
Your response has been recorded.