On May 12, 2026, Microsoft’s Security Response Center entry for CVE-2026-40406 identified the issue as a Windows TCP/IP information disclosure vulnerability, placing it in one of the operating system’s most consequential code paths: the network stack. The advisory’s most important signal is not...