High · published January 13, 2026
⚡ A clever race condition in the Windows SMB Server lets authorized attackers take the driver's seat from the passenger side! 🚗💨 It's like letting someone ride shotgun in your car, but they secretly have the ability to reach over and control the steering wheel without you noticing. If they time it just right, they can swerve you into dangerous territory! An attacker could elevate their privileges over the network, potentially gaining access to files and settings that should be off-limits. This could result in unauthorized data manipulation or even complete control of your systems—absolutely devastating!
It's like letting someone ride shotgun in your car, but they secretly have the ability to reach over and control the steering wheel without you noticing. If they time it just right, they can swerve you into dangerous territory! This vulnerability stems from improper synchronization during concurrent executions, allowing an authorized user to exploit the SMB Server's resource sharing. By timing their actions, they can manipulate the flow of execution to gain elevated privileges.
An attacker could elevate their privileges over the network, potentially gaining access to files and settings that should be off-limits. This could result in unauthorized data manipulation or even complete control of your systems—absolutely devastating! Patch your systems to the latest version immediately to close this vulnerability. Review access controls to ensure that only necessary users have elevated privileges, and consider implementing proper synchronization measures in your applications. You’ve got this! Follow these steps, and you’ll keep your network safe and sound! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| microsoft/windows_10_1607 | < 10.0.14393.8783 | 10.0.14393.8783 |
| microsoft/windows_10_1607 | < 10.0.14393.8783 | 10.0.14393.8783 |
| microsoft/windows_10_1809 | < 10.0.17763.8276 | 10.0.17763.8276 |
| microsoft/windows_10_1809 | < 10.0.17763.8276 | 10.0.17763.8276 |
| microsoft/windows_10_21h2 | < 10.0.19044.6809 | 10.0.19044.6809 |
| microsoft/windows_10_22h2 | < 10.0.19045.6809 | 10.0.19045.6809 |
| microsoft/windows_11_23h2 | < 10.0.22631.6491 | 10.0.22631.6491 |
| microsoft/windows_11_24h2 | < 10.0.26100.7623 | 10.0.26100.7623 |
| microsoft/windows_11_25h2 | < 10.0.26200.7623 | 10.0.26200.7623 |
| microsoft/windows_server_2012 | all versions | — |
| microsoft/windows_server_2012 | all versions | — |
| microsoft/windows_server_2016 | < 10.0.14393.8783 | 10.0.14393.8783 |
| microsoft/windows_server_2019 | < 10.0.17763.8276 | 10.0.17763.8276 |
| microsoft/windows_server_2022 | < 10.0.20348.4648 | 10.0.20348.4648 |
| microsoft/windows_server_2022_23h2 | < 10.0.25398.2092 | 10.0.25398.2092 |
| microsoft/windows_server_2025 | < 10.0.26100.32230 | 10.0.26100.32230 |