This vulnerability involves a use-after-free condition in the Windows Network Controller Host Agent on Windows Server 2019 (version 10.0.17763.0). An authorized attacker with local access can exploit this flaw to trigger a denial of service by causing the system to crash or become unresponsive. The CVSS v3.1 base score is 5.5 (medium severity), reflecting local attack vector, low complexity, required privileges, no user interaction, and impact limited to availability. Microsoft has published an official fix to address this issue.

The vulnerability allows an authorized local attacker to deny service on the affected Windows Server 2019 system by exploiting a use-after-free bug in the Network Controller Host Agent. There is no impact on confidentiality or integrity. No known exploits are reported in the wild at this time.

An official fix is available from Microsoft. Administrators should apply the security update referenced in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44805 to remediate this vulnerability.