High · published January 13, 2026
⚡ Watch out for a sneaky race condition lurking in Windows SMB Server! An authorized attacker could elevate their privileges over the network with just the right timing. 🚨 Think of this as a kitchen where two chefs are trying to use the same frying pan at the same time without checking in with each other. If one chef gets in and takes control of the pan first, they can burn the other chef's dish – or worse! With this vulnerability, a crafty attacker can gain unauthorized access to sensitive data or systems. Imagine them walking through the door with a master key they shouldn't have, ready to wreak havoc or steal information. Scary stuff, right?
Think of this as a kitchen where two chefs are trying to use the same frying pan at the same time without checking in with each other. If one chef gets in and takes control of the pan first, they can burn the other chef's dish – or worse! This race condition occurs when concurrent executions in the Windows SMB Server improperly synchronize shared resources, allowing an authorized user to escalate their privileges on the network.
With this vulnerability, a crafty attacker can gain unauthorized access to sensitive data or systems. Imagine them walking through the door with a master key they shouldn't have, ready to wreak havoc or steal information. Scary stuff, right? To protect your system, make sure to apply the latest updates and patches released by Microsoft. Additionally, review user permissions to ensure that only necessary accounts have access to sensitive resources. You've got this! Stay proactive and follow these steps to secure your network. 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| microsoft/windows_10_1607 | < 10.0.14393.8783 | 10.0.14393.8783 |
| microsoft/windows_10_1607 | < 10.0.14393.8783 | 10.0.14393.8783 |
| microsoft/windows_10_1809 | < 10.0.17763.8276 | 10.0.17763.8276 |
| microsoft/windows_10_1809 | < 10.0.17763.8276 | 10.0.17763.8276 |
| microsoft/windows_10_21h2 | < 10.0.19044.6809 | 10.0.19044.6809 |
| microsoft/windows_10_22h2 | < 10.0.19045.6809 | 10.0.19045.6809 |
| microsoft/windows_11_23h2 | < 10.0.22631.6491 | 10.0.22631.6491 |
| microsoft/windows_11_24h2 | < 10.0.26100.7623 | 10.0.26100.7623 |
| microsoft/windows_11_25h2 | < 10.0.26200.7623 | 10.0.26200.7623 |
| microsoft/windows_server_2008 | all versions | — |
| microsoft/windows_server_2008 | all versions | — |
| microsoft/windows_server_2008 | all versions | — |
| microsoft/windows_server_2012 | all versions | — |
| microsoft/windows_server_2012 | all versions | — |
| microsoft/windows_server_2016 | < 10.0.14393.8783 | 10.0.14393.8783 |
| microsoft/windows_server_2019 | < 10.0.17763.8276 | 10.0.17763.8276 |
| microsoft/windows_server_2022 | < 10.0.20348.4648 | 10.0.20348.4648 |
| microsoft/windows_server_2022_23h2 | < 10.0.25398.2092 | 10.0.25398.2092 |
| microsoft/windows_server_2025 | < 10.0.26100.32230 | 10.0.26100.32230 |