NetSight
medium6.5

CVE-2026-56168

Null pointer dereference in Windows SMB Server allows an authorized attacker to deny service over a network.

Impact

Null pointer dereference in Windows SMB Server allows an authorized attacker to deny service over a network.

Affected products

VendorProductAffected versions
MicrosoftWindows 10 21h2
before 10.0.19044.7548
MicrosoftWindows 10 22h2
before 10.0.19045.7548
MicrosoftWindows 11 24h2
before 10.0.26100.8875
MicrosoftWindows 11 25h2
before 10.0.26200.8875
MicrosoftWindows 11 26h1
before 10.0.28000.2269
before 10.0.28000.2525
MicrosoftWindows Server 2022
before 10.0.20348.5386
MicrosoftWindows Server 2025
before 10.0.26100.33158
MicrosoftWindows 10 Version 21H2
from 10.0.19044.0 before 10.0.19044.7548
MicrosoftWindows 10 Version 22H2
from 10.0.19045.0 before 10.0.19045.7548
MicrosoftWindows 11 Version 24H2
from 10.0.26100.0 before 10.0.26100.8875
MicrosoftWindows 11 Version 25H2
from 10.0.26200.0 before 10.0.26200.8875
MicrosoftWindows 11 Version 26H1
from 10.0.28000.0 before 10.0.28000.2525
MicrosoftWindows Server 2022
from 10.0.20348.0 before 10.0.20348.5386
MicrosoftWindows Server 2025
from 10.0.26100.0 before 10.0.26100.33158
MicrosoftWindows Server 2025 (Server Core Installation)
from 10.0.26100.0 before 10.0.26100.33158

Weakness classification

References