Microsoft disclosed CVE-2026-40401 on May 12, 2026, as an Important-rated Windows TCP/IP denial-of-service vulnerability caused by a null pointer dereference, affecting supported Windows client and server releases and remediated through the May 2026 security updates. The interesting part is not...