CVE-2026-56649
MediumCVSS 5.9Exploitation Probability (EPSS)
Low risk47th percentile - higher than 47% of all known CVEs
Summary
A race condition exists in Windows Network File System when using a shared resource concurrently. An unauthorized attacker can exploit this to execute code remotely over the network.
Risk Assessment
An attacker can remotely take control of the system over the network, posing a critical threat to data confidentiality, integrity, and availability.
Recommendation
Apply the security update from Microsoft for Windows Network File System.
Other vulnerabilities in Windows Network File System
See all- CVE-2026-68819Medium
Buffer over-read in Windows Network File System allows an unauthorized attacker to deny service over a network.
- CVE-2026-56650High
Heap-based buffer overflow in Windows Network File System allows an authorized attacker to elevate privileges locally.
- CVE-2026-56648High
A time-of-check time-of-use (TOCTOU) race condition in Windows Network File System allows an authorized attacker to elevate privileges over a network.
- CVE-2026-56194High
Heap-based buffer overflow vulnerability in Windows Network File System allows an authorized attacker to elevate privileges over a network.
Original NVD description (English source)
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Network File System allows an unauthorized attacker to execute code over a network.