CVE-2026-72949

Improper authentication in Windows SMB Server allows an authorized attacker to elevate privileges locally.

A missing authorization vulnerability in Windows SMB Server allows an authorized attacker to disclose information locally.

The vulnerability in Windows SMB Server is an allocation of resources without limits or throttling. It allows an authorized attacker to deny service over a network.

Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over a network.

Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over a network.

Use-after-free vulnerability in Windows SMB Server Network Transport Driver (srvnet.sys) allows an unauthorized attacker to execute code over a network.

A null pointer dereference in Windows SMB Server allows an authorized attacker to cause a denial of service over the network.

Incorrect implementation of the authentication algorithm in Windows SMB Server allows an authorized attacker to elevate privileges over a network.

A vulnerability in Windows SMB Server due to improper authentication allows local privilege escalation. An authorized attacker can exploit this flaw to gain higher privileges on the system.