CVE-2026-20927

MediumCVSS 5.3

Published: 13/01/2026(UTC)Updated: 30/07/2026(UTC)Translated: 31/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.89%

56th percentile - higher than 56% of all known CVEs

Summary

A race condition in Windows SMB Server allows an authenticated attacker to cause a denial of service over the network.

Risk Assessment

An attacker can disrupt SMB services, affecting file and printer access across the network and causing downtime.

Recommendation

Apply the Microsoft security update for Windows and restrict SMB access to trusted hosts only.

Original NVD description (English source)

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an authorized attacker to deny service over a network.