Is CVE-2026-45657 in the CISA Known Exploited Vulnerabilities catalog?

CVE-2026-45657 is not currently listed in the CISA KEV catalog.

Vulnerability intelligence

CVE-2026-45657 — Security Advisory

June 2026 Patch Tuesday delivered 208 CVEs (571 with Chromium bundled), 37 Critical. CVE-2026-45657 (CVSS 9.8) is a use-after-free in Windows Kernel TCP/IP that requires no authentication and can self-propagate. CVE-2026-47291 (CVSS 9.8) hits HTTP.sys directly — a web server RCE. CISA's 3-day mandate means patching is no longer optional.

CVSS 9.8 2026

What WebPulse reported · 1 analysis

208 CVEs in One Patch Tuesday. Microsoft's Largest Ever. Including a Wormable Kernel Flaw Compared to EternalBlue. Your Web Server Has 72 Hours.

June 2026 Patch Tuesday delivered 208 CVEs (571 with Chromium bundled), 37 Critical. CVE-2026-45657 (CVSS 9.8) is a use-after-free in Windows Kernel TCP/IP that

June 16, 2026

View CVE-2026-45657 on the NIST National Vulnerability Database →

Related vulnerabilities

CVE-2026-60137 CVE-2026-63030 CVE-2026-50549 CVE-2026-50548 CVE-2026-9082 CVE-2026-49160 CVE-2026-48019 CVE-2026-39861