Executive brief
A critical vulnerability has been identified in the Windows Server Network driver, which manages how the operating system communicates over a network. An unauthorized attacker could exploit this flaw remotely to take full control of the affected system without any user interaction. This could lead to a complete compromise of data, service outages, and a foothold for further attacks within the corporate network.
Technical details
This vulnerability is classified as a race condition (CWE-362) resulting from improper synchronization during concurrent execution using a shared resource within the Windows Server Network driver. The flaw is exploitable over the network without authentication (AV:N/AC:L/PR:N/UI:N), allowing for remote code execution (RCE). Successful exploitation grants the attacker high confidentiality, integrity, and availability impact, effectively providing full system control. Microsoft has released security updates to address this issue across multiple versions of Windows 10, Windows 11, and Windows Server 2012.
Affected products
- Microsoft Windows 10 1607, 1809, 21H2, 22H2
- Microsoft Windows 11 24H2, 25H2, 26H1
- Microsoft Windows Server 2012 All editions
Timeline
- 2026-07-14: disclosed
- 2026-07-14: advisory