---
id: "CVE-2026-112972"
page: "https://infrastack.ai/live/CVE-2026-112972"
kind: "vulnerability"
aliases: ["CVE-2026-112972"]
title: "Windows SMB Server: integer overflow lets an authorized user run code remotely"
severity: "high"
cvss: 7.5
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: [{"name": "Windows 10 1607 / Server 2016", "fixed": ["10.0.14393.9688"], "affected": ">= 10.0.14393.0, < 10.0.14393.9688", "ecosystem": "microsoft"}, {"name": "Windows 10 1809 / Server 2019", "fixed": ["10.0.17763.9487"], "affected": ">= 10.0.17763.0, < 10.0.17763.9487", "ecosystem": "microsoft"}, {"name": "Windows 10 21H2", "fixed": ["10.0.19044.7846"], "affected": ">= 10.0.19044.0, < 10.0.19044.7846", "ecosystem": "microsoft"}, {"name": "Windows 10 22H2", "fixed": ["10.0.19045.7846"], "affected": ">= 10.0.19045.0, < 10.0.19045.7846", "ecosystem": "microsoft"}, {"name": "Windows 11 23H2", "fixed": ["10.0.22631.7711"], "affected": ">= 10.0.22631.0, < 10.0.22631.7711", "ecosystem": "microsoft"}, {"name": "Windows 11 24H2", "fixed": ["10.0.26100.9974"], "affected": ">= 10.0.26100.0, < 10.0.26100.9974", "ecosystem": "microsoft"}, {"name": "Windows 11 25H2", "fixed": ["10.0.26200.9974"], "affected": ">= 10.0.26200.0, < 10.0.26200.9974", "ecosystem": "microsoft"}, {"name": "Windows 11 26H1", "fixed": ["10.0.28000.3501"], "affected": ">= 10.0.28000.0, < 10.0.28000.3501", "ecosystem": "microsoft"}, {"name": "Windows 11 26H2", "fixed": ["10.0.26300.9974"], "affected": ">= 10.0.26300.0, < 10.0.26300.9974", "ecosystem": "microsoft"}, {"name": "Windows Server 2022", "fixed": ["10.0.20348.5870"], "affected": ">= 10.0.20348.0, < 10.0.20348.5870", "ecosystem": "microsoft"}, {"name": "Windows Server 2025", "fixed": ["10.0.26100.33822"], "affected": ">= 10.0.26100.0, < 10.0.26100.33822", "ecosystem": "microsoft"}]
ecosystems: []
tags: ["file-sharing", "infrastructure", "smb", "windows", "windows-10", "windows-11", "windows-server"]
not_affected_if: ["smb-server-disabled"]
published_at: "2026-11-10T19:18:47+00:00"
first_seen_at: "2026-11-10T19:24:35+00:00"
updated_at: "2026-11-11T00:01:49+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-112972", "first_seen_at": "2026-11-10T19:24:35+00:00"}, {"source": "analyst", "url": "https://nvd.nist.gov/vuln/detail/cve-2026-112972", "first_seen_at": "2026-11-11T00:01:49+00:00", "cites": ["https://nvd.nist.gov/vuln/detail/cve-2026-112972"]}]
exploit_sources: []
---

# Windows SMB Server: integer overflow lets an authorized user run code remotely

Link for people: https://infrastack.ai/live/CVE-2026-112972 (this .md is for agents)

A flaw in the Windows SMB Server file-sharing service is an integer overflow that can cause memory corruption. An attacker with valid access to the network can run code on the affected machine.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- microsoft:Windows 10 1607 / Server 2016 affected >= 10.0.14393.0, < 10.0.14393.9688 fixed 10.0.14393.9688
- microsoft:Windows 10 1809 / Server 2019 affected >= 10.0.17763.0, < 10.0.17763.9487 fixed 10.0.17763.9487
- microsoft:Windows 10 21H2 affected >= 10.0.19044.0, < 10.0.19044.7846 fixed 10.0.19044.7846
- microsoft:Windows 10 22H2 affected >= 10.0.19045.0, < 10.0.19045.7846 fixed 10.0.19045.7846
- microsoft:Windows 11 23H2 affected >= 10.0.22631.0, < 10.0.22631.7711 fixed 10.0.22631.7711
- microsoft:Windows 11 24H2 affected >= 10.0.26100.0, < 10.0.26100.9974 fixed 10.0.26100.9974
- microsoft:Windows 11 25H2 affected >= 10.0.26200.0, < 10.0.26200.9974 fixed 10.0.26200.9974
- microsoft:Windows 11 26H1 affected >= 10.0.28000.0, < 10.0.28000.3501 fixed 10.0.28000.3501
- microsoft:Windows 11 26H2 affected >= 10.0.26300.0, < 10.0.26300.9974 fixed 10.0.26300.9974
- microsoft:Windows Server 2022 affected >= 10.0.20348.0, < 10.0.20348.5870 fixed 10.0.20348.5870
- microsoft:Windows Server 2025 affected >= 10.0.26100.0, < 10.0.26100.33822 fixed 10.0.26100.33822

## How to check

Run winver or 'cmd /c ver' and compare the build to the fixed builds. Also check whether the SMB server is running: Get-Service LanmanServer, or Get-SmbServerConfiguration.

## Fix

Install the November 2026 Windows cumulative update that brings the OS build to at least the fixed build for your version (e.g. Windows 11 24H2 10.0.26100.9974, Server 2022 10.0.20348.5870, Server 2025 10.0.26100.33822). KB number not confirmed from MSRC.

## Timeline

- 2026-11-10T19:24:35+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-112972
- 2026-11-11T00:01:49+00:00 analyst https://nvd.nist.gov/vuln/detail/cve-2026-112972 — MSRC page is JS-only and returned nothing; used Microsoft CNA affected builds as republished on NVD. KB numbers and mitigations unknown; nothing verified. No exploitation or PoC seen.

## Documents

- [describes] NVD CVE-2026-112972 (Microsoft CNA data) https://nvd.nist.gov/vuln/detail/cve-2026-112972

## From the sources

Integer overflow or wraparound in Windows SMB Server allows an authorized attacker to execute code over a network.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_