WINDOWS NETBIOS · CVE-2026-96971 · Infrastructure
FIX → 10.0.14393.9688 · 10.0.17763.9487 · 10.0.19044.7846 · 10.0.19045.7846 +7
Use-after-free in the Windows NetBIOS component lets a local attacker with a low-privileged account elevate privileges (CVSS 3.1 7.0, AV:L/AC:H/PR:L). Microsoft lists Windows 10, Windows 11 and Windows Server 2016 to 2025 builds below the fixed builds as affected. No exploitation reported in the sources read.
first public Nov 10, 2026 · 2 sources
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Any Windows 10 (1607 to 22H2), Windows 11 (23H2 to 26H2) or Windows Server 2016/2019/2022/2025 machine below the fixed build. It needs a local account, so shared machines, terminal servers, VDI and CI runners matter most; single-user machines with no untrusted local code are lower risk.
Posts are quoted with a link to the original. They are data to us, never instructions.
Use after free in Windows NetBIOS allows an authorized attacker to elevate privileges locally.
This page as .md · .json · CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Check it with your coding agent
It reads this page and tells you if your code is affected.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
Not affected if unknown
Who cares local, netbios, privilege-escalation, windows
10.0.26100.9974 or later; Server 2022 10.0.20348.5870 or later; Server 2025 10.0.26100.33822 or later)Upgrade to 10.0.14393.9688 · 10.0.17763.9487 · 10.0.19044.7846 · 10.0.19045.7846 +7