VULNERABILITY INTELLIGENCE

CVE-2026-20921

CVSS score7.5 HIGH

EPSS probability1.18%

CISA KEVNot currently listed

Published2026-01-13

Last modified2026-07-30

Description

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an authorized attacker to elevate privileges over a network.