EUVD-2026-73479
GHSA-c94h-fc4q-qxvc
Severity by source
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Local attacker with low privileges exploits missing authorization for read-only info disclosure; no integrity or availability impact applies.
Primary rating from Vendor (microsoft).
CVSS VectorVendor: microsoft
Lifecycle Timeline
4DescriptionCVE.org
Missing authorization in Windows SMB Server allows an authorized attacker to disclose information locally.
AnalysisAI
Missing authorization in the Windows SMB Server component allows a locally authenticated attacker with low privileges to read sensitive information they are not authorized to access. The flaw, rooted in CWE-862, means the SMB Server fails to enforce proper authorization checks before returning data to a requesting principal. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires the attacker to have an active local session on the target Windows system - either physical local logon, Remote Desktop (RDP) access, or an equivalent session - with at minimum low-privilege (standard user) credentials (CVSS PR:L). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS base score of 5.5 (Medium) accurately reflects the constrained attack surface: AV:L requires the attacker to already have local access or an established session on the target system, and PR:L means at minimum low-privilege credentials are required. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the Microsoft-released security update corresponding to the installed Windows version, bringing build numbers to or above the thresholds listed in the affected versions data (e.g., Windows 10 22H2 to 10.0.19045.7725, Windows 11 24H2 to 10.0.26100.9445, Windows Server 2025 to 10.0.26100.33438). … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-862 – Missing Authorization
View allShare
External POC / Exploit Code
Leaving vuln.today