Microsoft Windows SMB Server Privilege Escalation Vulnerability

A vulnerability in Windows SMB Server allows an authorized attacker to elevate privileges over a network. This issue arises from improper access control, enabling attackers to gain SYSTEM privileges by executing a specially crafted script that coerces a victim machine to connect back to the attacker's SMB Server and authenticate.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing an attacker to gain SYSTEM privileges on the affected machine.

Remediation

Users can apply the security update for this vulnerability, which is available as part of the October 2025 security update rollout. Instructions for downloading this update can be found in the Microsoft Update Catalog.