CVE-2026-84011

Awaiting Analysis Awaiting Analysis - Queue

Incorrect Authorization Bypass in Windows SMB Client

Publication date: 2026-10-13

Last updated on: 2026-10-13

Assigner: Microsoft Corporation

Description

Incorrect authorization in Windows SMB Client allows an authorized attacker to bypass a security feature locally.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-13

Last Modified

2026-10-13

Generated

2026-10-19

AI Q&A

2026-10-14

EPSS Evaluated

2026-10-18

NVD

CVE-2026-84011

EUVD

EUVD-2026-99449

Affected Vendors & Products

Vendor	Product	Version / Range
Microsoft	Windows	11 version 23H2 10.0.22631.0
Microsoft	Windows	11 Version 23H2 10.0.22631.0
Microsoft	Windows	11 Version 24H2 10.0.26100.0
Microsoft	Windows	11 Version 25H2 10.0.26200.0
Microsoft	Windows	11 version 26H1 10.0.28000.0
Microsoft	Windows	11 Version 26H2 10.0.26300.0
Microsoft	Windows	Server 2022 10.0.20348.0
Microsoft	Windows	Server 2025 10.0.26100.0
Microsoft	Windows	Server 2025 (Server Core installation) 10.0.26100.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-863	The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

Attack-Flow Graph

Executive Summary

This vulnerability is a security feature bypass in the Windows SMB Client. An authorized attacker can exploit incorrect authorization to bypass a security feature locally on affected systems.

Impact Analysis

An attacker could bypass security controls to gain unauthorized access or perform actions they should not be able to. This could lead to data exposure or system compromise if combined with other vulnerabilities.

Compliance Impact

This vulnerability may impact compliance by weakening security controls required by standards like GDPR or HIPAA. Bypassing authorization could lead to unauthorized data access, violating confidentiality requirements.

Mitigation Strategies

Apply the latest Windows security updates from Microsoft Update to patch the SMB Client authorization flaw. Monitor Microsoft's advisory for additional guidance.

Hi! I’m here to help you understand CVE-2026-84011. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70