CVE-2026-71332

A use-after-free vulnerability in the Windows Secure Socket Tunneling Protocol (SSTP) can be exploited by an authorized attacker to gain elevated privileges on affected systems. This high-severity flaw poses significant risks for organizations utilizing Windows environments, particularly those with users who have access to SSTP functionalities. IT security teams should prioritize patching this vulnerability to mitigate potential local privilege escalation attacks.