Microsoft published CVE-2026-40414 on May 12, 2026 as an Important Windows TCP/IP denial-of-service vulnerability caused by a NULL pointer dereference, with updates available across supported Windows client and server releases and exploitation assessed as unlikely at publication. That sounds, at...