Vulnerabilities

Heap-based buffer overflow in Windows SMB Client allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows SMB Client allows an authorized attacker to elevate privileges locally.

Read at NIST National Vulnerability Database (CVE API 2.0)

Vendor

Microsoft

Product

Windows 11 version 26H1

CVSS v3.1

7.0 AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness

CWE-122

Exposure class

Operating system

NVD status

Awaiting Analysis

• NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
• CVE-2026-112971 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 46
   CVE NVD 3h ago

   Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

   CVSS 7.8 CVE-2026-113856 Microsoft
2. 36
   CVE NVD 3h ago

   Heap-based buffer overflow in Windows File Server Resource Management Service allows an authorized attacker to elevate privileges locally.

   CVSS 7.8 CVE-2026-113765 Microsoft
3. 36
   CVE NVD 3h ago

   Heap-based buffer overflow in Windows XWizard Framework allows an authorized attacker to elevate privileges locally.

   CVSS 8.8 CVE-2026-113760 Microsoft
4. 36
   CVE NVD 3h ago

   Heap-based buffer overflow in Windows Device Inventory allows an authorized attacker to elevate privileges locally.

   CVSS 7.0 CVE-2026-113750 Microsoft
5. 36
   CVE NVD 3h ago

   Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

   CVSS 7.8 CVE-2026-112981 Microsoft
6. 36
   CVE NVD 3h ago

   Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally.

   CVSS 7.0 CVE-2026-112804 Microsoft
7. 36
   CVE NVD 3h ago

   Heap-based buffer overflow in Windows Diagnostic Policy Service allows an authorized attacker to elevate privileges locally.

   CVSS 7.0 CVE-2026-112800 Microsoft
8. 36
   CVE NVD 3h ago

   Heap-based buffer overflow in Windows Smart Card allows an authorized attacker to elevate privileges locally.

   CVSS 7.8 CVE-2026-112794 Microsoft
9. 36
   CVE NVD 3h ago

   Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

   CVSS 7.0 CVE-2026-112765 Microsoft
10. 36
    CVE NVD 3h ago

    Heap-based buffer overflow in Windows Task Scheduler allows an authorized attacker to elevate privileges locally.

    CVSS 7.0 CVE-2026-112759 Microsoft