What is the CVSS score of CVE-2026-24294?

CVE-2026-24294 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of Windows 10 1607 are affected by CVE-2026-24294?

A high-severity vulnerability in Windows SMB Server could allow authenticated users to gain elevated system privileges, potentially compromising sensitive data and critical business operations.. A patch is available.

How to fix or mitigate CVE-2026-24294?

Within 24 hours: Inventory all Windows systems running SMB Server and assess exposure scope; disable SMB v1 if not operationally critical and restrict SMB access via firewall rules. Within 7 days: Implement network segmentation to limit SMB traffic to authorized systems only; enable enhanced logging and monitoring for SMB authentication failures and privilege escalation attempts. Within 30 days: Develop and test a patching strategy; monitor for vendor security updates and apply immediately upon availability; conduct vulnerability rescanning to confirm remediation.

Windows 10 1607 CVE-2026-24294

HIGH

Improper Authentication (CWE-287)

2026-03-10 secure@microsoft.com

Microsoft Authentication Bypass Windows 10 1607 Windows 10 1809 Windows 10 21h2 Windows 10 22h2 Windows 11 23h2 Windows 11 24h2 Windows 11 25h2 Windows 11 26h1 Windows Server 2012 Windows Server 2016 Windows Server 2019 Windows Server 2022 Windows Server 2022 23h2 Windows Server 2025

7.8

CVSS 3.1 · Vendor: microsoft

Severity by source

Vendor (microsoft) PRIMARY

7.8 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from Vendor (microsoft) · only source for this CVE.

CVSS VectorVendor: microsoft

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:55 vuln.today

CVE Published

Mar 10, 2026 - 18:18 nvd

HIGH 7.8

DescriptionCVE.org

Improper authentication in Windows SMB Server allows an authorized attacker to elevate privileges locally.

AnalysisAI

Windows SMB Server authentication bypass across multiple versions (Windows 10 1607, Windows 11 23h2, Windows Server 2012/2025) permits authenticated local users to escalate privileges with high impact to confidentiality, integrity, and availability. The vulnerability stems from improper authentication validation in the SMB service, allowing a local attacker to gain system-level access without user interaction. No patch is currently available, leaving affected systems vulnerable to privilege escalation attacks from any authenticated user.

Technical ContextAI

Classified as CWE-287 (Improper Authentication). Improper authentication in Windows SMB Server allows an authorized attacker to elevate privileges locally.