Microsoft published CVE-2026-40399 on May 12, 2026, as an Important-rated Windows TCP/IP elevation-of-privilege vulnerability caused by a stack-based buffer overflow that lets a locally authorized attacker gain SYSTEM privileges after applying pressure to the vulnerable component. The phrase...