Microsoft November 2026 update fixes 1,093 flaws, one Outlook zero-day
Opening a crafted file can leak an NTLMv2 hash; the Preview Pane is not an attack vector.
74
CVE-2026-113825
Race condition RCE in Windows SMB srvnet.sys
- CVSS 3.1
- 7.5 high
- EPSS
- —
- Published
- ·
- Modified
AI analysisSummaries by Vani AI
A race condition in the Windows SMB Server network transport driver (srvnet.sys) lets an attacker who already has an authorized account run code over the network. No user interaction is required. Microsoft has not listed affected builds. Hosts running the SMB server component are in scope.
What to do: Apply Microsoft's update for CVE-2026-113825. Microsoft has not named a fixed build or workaround.
| Product | Affected |
|---|---|
| Microsoft Windows SMB Server Network Transport Driver (srvnet.sys) | — |
Estimated exposure
largeWidespread Windows SMB hosts; credentials required — Windows SMB is widely deployed; network attack still needs an authorized account.
Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.
Description · NVD
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server Network Transport Driver (srvnet.sys) allows an authorized attacker to execute code over a network.
- Weakness
- CWE-362
- Vector
- CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H