Vulnerabilities
CVE-2026-69572: Windows SMB Client Information Disclosure Vulnerability
A flaw in the Windows SMB client can leak sensitive data to local users. The issue is triggered by malformed SMB packets and affects Windows 10/11 and Server 2019/2022. Apply the latest MSRC update or patch to mitigate the risk.
What happened
A defect in the Windows SMB client allows local users to receive sensitive information from the SMB protocol stack when processing crafted packets. The flaw was identified as CVE-2026-69572 and is classified as an information disclosure vulnerability.
Impact
Local users with sufficient privileges can read portions of memory that contain authentication tokens, cached credentials, or other confidential data. The vulnerability does not allow remote exploitation or privilege escalation, but it can aid attackers in credential harvesting.
What to do
- Verify that your systems are running the latest Windows updates. The fix is included in the MSRC advisory released on 2026-08-15.
- If you cannot apply the update immediately, isolate the affected machines from the SMB network segment until a patch is applied.
- Monitor SMB traffic for anomalous packet patterns and consider disabling SMBv1 on all hosts.
Additional Notes
Microsoft has confirmed that the vulnerability is informational only and does not require immediate action beyond standard patching. No known exploits have been reported.
Related vulnerabilities
CVE-2026-108462: Windows Kernel Information Disclosure Vulnerability
Microsoft has identified a Windows kernel information disclosure flaw (CVE‑2026‑108462) that permits local attackers with elevated privileges to read sensitive system data. The issue is fixed in the latest security update; administrators should apply the patch immediately and verify that kernel memory is protected.
Read briefing
Windows SMB Server DoS Vulnerability (CVE‑2026‑70133) – Immediate Patch Required
An unbounded resource allocation flaw in Windows SMB Server lets remote attackers trigger a denial‑of‑service. The vulnerability affects all Windows Server editions that run SMB. Microsoft has released a patch; administrators should apply it immediately and consider disabling SMB where possible.
Read briefing
CVE-2026-69803: Windows DHCP Server Information Disclosure
Microsoft has acknowledged CVE-2026-69803, an information disclosure flaw in the Windows DHCP Server that could allow attackers to read sensitive data. The vulnerability is currently unpatched; defenders should monitor for updates and limit DHCP exposure.
Read briefing
CVE-2026-61363: Remote Desktop Client Remote Code Execution Vulnerability
A critical RCE flaw in Windows Remote Desktop Client (CVE-2026-61363) allows attackers to execute arbitrary code via crafted RDP traffic. All Windows 10/11 and Windows Server 2022 systems are affected. Apply the latest security update and enforce NLA or VPN to mitigate.
Read briefing