CVE-2026-72936
HighCVSS 8.1Exploitation Probability (EPSS)
Low risk50th percentile - higher than 50% of all known CVEs
Summary
Use after free in Windows SMB Client allows an unauthorized attacker to execute code over a network.
Risk Assessment
An unauthorized attacker can remotely execute arbitrary code, potentially leading to system compromise and lateral movement.
Recommendation
Install Windows security updates and restrict access to SMB ports from external networks.
Other vulnerabilities in Windows SMB Client
See all- CVE-2026-40410High
Use after free in Windows SMB Client allows an authorized attacker to elevate privileges locally.
- CVE-2026-69618Medium
An out-of-bounds read vulnerability in Windows SMB Client allows an authorized attacker to disclose information locally.
- CVE-2026-69572Medium
An out-of-bounds read vulnerability in Windows SMB Client allows an authorized attacker to disclose information over a network.
- CVE-2026-69544High
Heap-based buffer overflow in Windows SMB Client allows an authorized attacker to elevate privileges locally.
- CVE-2026-65794Medium
A buffer over-read in Windows SMB Client allows an unauthorized attacker to disclose information over a network.
- CVE-2026-62799High
Heap-based buffer overflow in Windows SMB Client allows an authorized attacker to elevate privileges locally.
- CVE-2026-62782Medium
An out-of-bounds read in Windows SMB Client allows an unauthorized attacker to disclose information over a network.
Original NVD description (English source)
Use after free in Windows SMB Client allows an unauthorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS