CVE-2026-56648
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk38th percentile - higher than 38% of all known CVEs
Summary
A time-of-check time-of-use (TOCTOU) race condition in Windows Network File System allows an authorized attacker to elevate privileges over a network.
Risk Assessment
An authorized attacker can exploit the race window between check and use to gain elevated privileges and potentially take control of the network file system.
Recommendation
Install the latest Windows security updates that include a fix for this vulnerability.
Other vulnerabilities in Windows Network File System
See all- CVE-2026-68819Medium
Buffer over-read in Windows Network File System allows an unauthorized attacker to deny service over a network.
- CVE-2026-56650High
Heap-based buffer overflow in Windows Network File System allows an authorized attacker to elevate privileges locally.
- CVE-2026-56649Medium
A race condition exists in Windows Network File System when using a shared resource concurrently. An unauthorized attacker can exploit this to execute code remotely over the network.
- CVE-2026-56194High
Heap-based buffer overflow vulnerability in Windows Network File System allows an authorized attacker to elevate privileges over a network.
Original NVD description (English source)
Time-of-check time-of-use (toctou) race condition in Windows Network File System allows an authorized attacker to elevate privileges over a network.