CVE-2026-112971: Windows SMB Client Elevation of Privilege Vulnerability

Q: What level of access does an attacker need to exploit this issue?

An attacker must already be authorized on the affected Windows 11 system and exploit the flaw locally. The provided data does not indicate that remote unauthenticated exploitation is possible.

Q: What is the likely impact if exploitation succeeds?

Successful exploitation allows local privilege elevation. The supplied severity vector indicates potential high impact to confidentiality, integrity, and availability.

Q: Is exploitation expected to be straightforward?

No. The vulnerability is rated as having high attack complexity, indicating exploitation requires conditions or techniques beyond a simple local attack.

Published Nov 10, 2026

Updated

Heap-based buffer overflow in Windows SMB Client allows an authorized attacker to elevate privileges locally.

Other sources

Windows SMB Client Elevation of Privilege Vulnerability

— Microsoft

Affected Software

2 affected componentsFixes available

Microsoft Windows 11=26H1, >=10.0.28000<10.0.28000.3501

10.0.28000.3501

Microsoft Windows 11=26H1, >=10.0.28000<10.0.28000.3501

10.0.28000.3501

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.28000.3501Patch KB5132059

Event History

Nov 10, 2026

CVE Published

via Microsoft·04:00 PM

Data Sourced

via Microsoft·04:00 PM

DescriptionSeverityWeakness

Data Sourced

via Microsoft·04:00 PM

Affected Software

CVE Published

via MITRE·06:18 PM

Data Sourced

via MITRE·06:18 PM

DescriptionSeverity

Data Sourced

via NVD·07:18 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

An attacker must already be authorized on the affected Windows 11 system and exploit the flaw locally. The provided data does not indicate that remote unauthenticated exploitation is possible.

What is the likely impact if exploitation succeeds?

Successful exploitation allows local privilege elevation. The supplied severity vector indicates potential high impact to confidentiality, integrity, and availability.

Is exploitation expected to be straightforward?

No. The vulnerability is rated as having high attack complexity, indicating exploitation requires conditions or techniques beyond a simple local attack.

CVE-2026-112971: Windows SMB Client Elevation of Privilege Vulnerability

Other sources

Affected Software

Remediation

Event History

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What is the likely impact if exploitation succeeds?

Is exploitation expected to be straightforward?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What is the likely impact if exploitation succeeds?

Is exploitation expected to be straightforward?