Medium severity6.5NVD Advisory· Published Jul 14, 2026· Updated Jul 22, 2026
CVE-2026-56168
CVE-2026-56168
Description
Null pointer dereference in Windows SMB Server allows an authorized attacker to deny service over a network.
Affected products
9cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*range: <10.0.19044.7548
- cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*range: <10.0.19045.7548
cpe:2.3:o:microsoft:windows_11_26h1:*:*:*:*:*:*:x64:*+ 1 more
- cpe:2.3:o:microsoft:windows_11_26h1:*:*:*:*:*:*:x64:*range: <10.0.28000.2269
- cpe:2.3:o:microsoft:windows_11_26h1:*:*:*:*:*:*:arm64:*range: <10.0.28000.2525
- cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*Range: <10.0.20348.5386
- cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*Range: <10.0.26100.33158
Patches
Vulnerability mechanics
References
1- msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56168nvdPatchVendor Advisory
News mentions
0No linked articles in our index yet.