Executive brief
Windows SMB Client is a component that enables computers to communicate with file servers and network resources using the SMB protocol. This vulnerability allows an authorized user on the network to read sensitive data from Windows memory through a malformed SMB message, potentially exposing passwords, tokens, or other confidential information.
Technical details
An out-of-bounds read vulnerability exists in the Windows SMB Client implementation, allowing an attacker to access memory regions outside the intended bounds of a buffer. The vulnerability requires an attacker to be authenticated and network-reachable to the target system. By crafting a specially formatted SMB network message, an attacker can trigger the out-of-bounds read and leak sensitive information from the affected system's memory. This is an information disclosure vulnerability with no code execution capability.
Affected products
- Microsoft Windows
Timeline
- 2026-09-08: disclosed