Microsoft Windows SMB Remote Code Execution Vulnerability

A race condition vulnerability has been identified in Windows Server 2025, Windows 11 Version 24H2 for x64-based and ARM64-based Systems, and Windows Server 2025 (Server Core installation). This vulnerability allows an unauthorized attacker to execute code remotely over the network. The issue arises from improper synchronization in concurrent execution using shared resources, creating a race condition that can be exploited.

Impact

Exploitation of this vulnerability allows for remote code execution on the affected system.

Remediation

Users can apply the security updates KB5063878 and KB5064010 to address this vulnerability. These updates are available through the Microsoft Update Catalog.