cve 2026 44806

The cve 2026 44806 tag covers reporting on a remotely exploitable denial-of-service vulnerability in Windows Secure Channel (Schannel). The flaw affects supported Windows clients and servers and can be triggered over a network without authentication or user interaction. It results from Windows Cryptographic Services failing to release memory after its effective lifetime, allowing an unauthorized attacker to gradually or repeatedly consume resources and impair the system. Microsoft addressed CVE-2026-44806 in the July 14, 2026 security updates. Coverage also notes Microsoft’s CVSS 3.1 score of 5.3 and emphasizes timely patch deployment as the primary defense.