Microsoft Windows SMB Server Privilege Escalation Vulnerability

A race condition vulnerability has been identified in the Windows SMB Server, allowing an authorized attacker to elevate privileges over the network. This issue arises from concurrent execution using shared resources without proper synchronization.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing an attacker to gain SYSTEM privileges.

Remediation

Users can apply the security update for this vulnerability, which is available as part of the January 2026 Monthly Rollup for various Windows Server and Windows 10 versions. Instructions for downloading this update can be found in the Microsoft Update Catalog.