Windows SMB Server の srvnet.sys に権限を持つ攻撃者からコードを実行される脆弱性
Summary
Windows SMB Server Network Transport Driver（srvnet.sys）の競合状態の脆弱性（CVE-2026-113825、CVSS 7.5）です。認証を受けた攻撃者がネットワーク越しにコードを実行できるおそれがあります。Windows 10 バージョン 1809・21H2・22H2、Windows 11 バージョン 23H2・24H2・25H2が影響を受けます。各版の修正版が公開されているため、Windows Update で適用してください。
AI summary
Produced by SecPulse using an external AI model; it may contain mistakes. Check the original description and references below before acting on it.
Windows SMB Server Network Transport Driver（srvnet.sys）の競合状態の脆弱性（CVE-2026-113825、CVSS 7.5）です。認証を受けた攻撃者がネットワーク越しにコードを実行できるおそれがあります。Windows 10 バージョン 1809・21H2・22H2、Windows 11 バージョン 23H2・24H2・25H2が影響を受けます。各版の修正版が公開されているため、Windows Update で適用してください。
Affected packages
| Package | Affected → Fixed | |
|---|---|---|
| MicrosoftWindows 10 Version 1809 |
≥ 10.0.17763.0, < 10.0.17763.9487→ 10.0.17763.9487 |
10.0.17763.9487 |
| MicrosoftWindows 10 Version 21H2 |
≥ 10.0.19044.0, < 10.0.19044.7846→ 10.0.19044.7846 |
10.0.19044.7846 |
| MicrosoftWindows 10 Version 22H2 |
≥ 10.0.19045.0, < 10.0.19045.7846→ 10.0.19045.7846 |
10.0.19045.7846 |
| MicrosoftWindows 11 Version 23H2 |
≥ 10.0.22631.0, < 10.0.22631.7711→ 10.0.22631.7711 |
10.0.22631.7711 |
| MicrosoftWindows 11 Version 24H2 |
≥ 10.0.26100.0, < 10.0.26100.9974→ 10.0.26100.9974 |
10.0.26100.9974 |
| MicrosoftWindows 11 Version 25H2 |
≥ 10.0.26200.0, < 10.0.26200.9974→ 10.0.26200.9974 |
10.0.26200.9974 |
| MicrosoftWindows 11 version 26H1 |
≥ 10.0.28000.0, < 10.0.28000.3501→ 10.0.28000.3501 |
10.0.28000.3501 |
| MicrosoftWindows 11 Version 26H2 |
≥ 10.0.26300.0, < 10.0.26300.9974→ 10.0.26300.9974 |
10.0.26300.9974 |
| MicrosoftWindows Server 2019 |
≥ 10.0.17763.0, < 10.0.17763.9487→ 10.0.17763.9487 |
10.0.17763.9487 |
| MicrosoftWindows Server 2019 (Server Core installation) |
≥ 10.0.17763.0, < 10.0.17763.9487→ 10.0.17763.9487 |
10.0.17763.9487 |
| MicrosoftWindows Server 2022 |
≥ 10.0.20348.0, < 10.0.20348.5870→ 10.0.20348.5870 |
10.0.20348.5870 |
| MicrosoftWindows Server 2025 |
≥ 10.0.26100.0, < 10.0.26100.33822→ 10.0.26100.33822 |
10.0.26100.33822 |
| MicrosoftWindows Server 2025 (Server Core installation) |
≥ 10.0.26100.0, < 10.0.26100.33822→ 10.0.26100.33822 |
10.0.26100.33822 |
Original description The description as published by the source.
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server Network Transport Driver (srvnet.sys) allows an authorized attacker to execute code over a network.
Source: Microsoft Security Response Center Blog NVD GitHub Advisory
References
- web msrc.microsoft.com
- web nvd.nist.gov
- web github.com