CVE-2026-20848CWE-362

CVE-2026-20848

High · published January 13, 2026

CVSS v3.1
7.5
EPSS
1%
Percentile
54.3
In the wild
Unconfirmed
What it is

⚡ A sneaky race condition in the Windows SMB Server allows an authorized attacker to elevate their privileges like a backstage pass to the VIP section of a concert! 🎟️ Think of the SMB Server as a bustling restaurant where staff are sharing a single order pad. If two waiters mistakenly take orders simultaneously, one might get a dish that wasn’t intended for them, leading to mix-ups. Here, the race condition is that chaotic moment where the orders collide! With this vulnerability, an authorized attacker can exploit this race condition to gain elevated privileges, allowing them to access sensitive data or control resources they shouldn’t. Imagine someone at the concert not only getting into the VIP area but also taking over the DJ booth and changing the entire playlist! This could lead to system compromise and unauthorized access across the network.

Put simply

Think of the SMB Server as a bustling restaurant where staff are sharing a single order pad. If two waiters mistakenly take orders simultaneously, one might get a dish that wasn’t intended for them, leading to mix-ups. Here, the race condition is that chaotic moment where the orders collide! This vulnerability in the Windows SMB Server arises from improper synchronization during concurrent executions, letting an attacker exploit shared resources to elevate their privileges on the network.

What to do

With this vulnerability, an authorized attacker can exploit this race condition to gain elevated privileges, allowing them to access sensitive data or control resources they shouldn’t. Imagine someone at the concert not only getting into the VIP area but also taking over the DJ booth and changing the entire playlist! This could lead to system compromise and unauthorized access across the network. To protect against this, make sure to apply the latest security patches from Microsoft, specifically targeting the Windows SMB Server. Additionally, review your system configurations and user privileges to minimize potential attack vectors. You've got this! Stay proactive, apply those updates, and keep your systems safe! 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00745 · 54.3th percentile
Weakness
CWE-362 · Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Published
2026-01-13T23:16Z
Affected products (16)
ProductVersionsFixed in
microsoft/windows_10_1607< 10.0.14393.878310.0.14393.8783
microsoft/windows_10_1607< 10.0.14393.878310.0.14393.8783
microsoft/windows_10_1809< 10.0.17763.827610.0.17763.8276
microsoft/windows_10_1809< 10.0.17763.827610.0.17763.8276
microsoft/windows_10_21h2< 10.0.19044.680910.0.19044.6809
microsoft/windows_10_22h2< 10.0.19045.680910.0.19045.6809
microsoft/windows_11_23h2< 10.0.22631.649110.0.22631.6491
microsoft/windows_11_24h2< 10.0.26100.762310.0.26100.7623
microsoft/windows_11_25h2< 10.0.26200.762310.0.26200.7623
microsoft/windows_server_2012all versions—
microsoft/windows_server_2012all versions—
microsoft/windows_server_2016< 10.0.14393.878310.0.14393.8783
microsoft/windows_server_2019< 10.0.17763.827610.0.17763.8276
microsoft/windows_server_2022< 10.0.20348.464810.0.20348.4648
microsoft/windows_server_2022_23h2< 10.0.25398.209210.0.25398.2092
microsoft/windows_server_2025< 10.0.26100.762310.0.26100.7623
References (1)
EPSS history
Timeline
  • 13 JAN 17:56Z
    Windows SMB Server Elevation of Privilege Vulnerability
    cvelistv5