Lucene search
K

CVE-2026-24294

🗓️ 10 Mar 2026 17:04:45Reported by microsoftType 
cve
 cve
🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 11 Views🌐 WEB

CVE-2026-24294 is a Windows Server Message Block elevation of privilege vulnerability.

Related
Detection
Affected
Refs
Paths
Social
ReporterTitlePublishedViews
Family
GithubExploit
Exploit for Improper Authentication in Microsoft
30 Apr 202604:31
githubexploit
ATTACKERKB
CVE-2026-24294
10 Mar 202617:04
attackerkb
Information Security Automation
March Microsoft Patch Tuesday
11 Mar 202619:20
avleonov
Circl
CVE-2026-24294
10 Mar 202616:57
circl
CNNVD
Microsoft Windows SMB Server 授权问题漏洞
10 Mar 202600:00
cnnvd
Cvelist
CVE-2026-24294 Windows SMB Server Elevation of Privilege Vulnerability
10 Mar 202617:04
cvelist
EUVD
EUVD-2026-10620
10 Mar 202618:31
euvd
EUVD
EUVD-2026-10621
10 Mar 202618:31
euvd
Japan Vulnerability Notes
Security information for Hitachi Disk Array Systems
25 May 202602:39
jvn
Microsoft KB
March 10, 2026—KB5078734 (OS Build 25398.2207)
10 Mar 202614:00
mskb
Rows per page
NVD
Vulners
CNA
Node
microsoftwindows_10_1607Range<10.0.14393.8957x64
OR
microsoftwindows_10_1607Range<10.0.14393.8957x86
OR
microsoftwindows_10_1809Range<10.0.17763.8511x64
OR
microsoftwindows_10_1809Range<10.0.17763.8511x86
OR
microsoftwindows_10_21h2Range<10.0.19044.7058arm64
OR
microsoftwindows_10_21h2Range<10.0.19044.7058x64
OR
microsoftwindows_10_21h2Range<10.0.19044.7058x86
OR
microsoftwindows_10_22h2Range<10.0.19045.7058arm64
OR
microsoftwindows_10_22h2Range<10.0.19045.7058x64
OR
microsoftwindows_10_22h2Range<10.0.19045.7058x86
OR
microsoftwindows_11_23h2Range<10.0.22631.6783arm64
OR
microsoftwindows_11_23h2Range<10.0.22631.6783x64
OR
microsoftwindows_11_24h2Range<10.0.26100.7979arm64
OR
microsoftwindows_11_24h2Range<10.0.26100.7979x64
OR
microsoftwindows_11_25h2Range<10.0.26200.7979arm64
OR
microsoftwindows_11_25h2Range<10.0.26200.7979x64
OR
microsoftwindows_11_26h1Range<10.0.28000.1719arm64
OR
microsoftwindows_11_26h1Range<10.0.28000.1719x64
OROROR
microsoftwindows_server_2016Range<10.0.14393.8957
OR
microsoftwindows_server_2019Range<10.0.17763.8511
OR
microsoftwindows_server_2022Range<10.0.20348.4830
OROR
microsoftwindows_server_2025Range<10.0.26100.32463x64
[
  {
    "vendor": "Microsoft",
    "product": "Windows 10 Version 1607",
    "platforms": [
      "32-bit Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.14393.0",
        "lessThan": "10.0.14393.8957",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 10 Version 1809",
    "platforms": [
      "32-bit Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.17763.0",
        "lessThan": "10.0.17763.8511",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 10 Version 21H2",
    "platforms": [
      "32-bit Systems",
      "ARM64-based Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.19044.0",
        "lessThan": "10.0.19044.7058",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 10 Version 22H2",
    "platforms": [
      "32-bit Systems",
      "ARM64-based Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.19045.0",
        "lessThan": "10.0.19045.7058",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 11 version 22H3",
    "platforms": [
      "ARM64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.22631.0",
        "lessThan": "10.0.22631.6783",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 11 Version 23H2",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.22631.0",
        "lessThan": "10.0.22631.6783",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 11 Version 24H2",
    "platforms": [
      "ARM64-based Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.26100.0",
        "lessThan": "10.0.26100.8037",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 11 Version 25H2",
    "platforms": [
      "ARM64-based Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.26200.0",
        "lessThan": "10.0.26200.8037",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 11 version 26H1",
    "platforms": [
      "ARM64-based Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.28000.0",
        "lessThan": "10.0.28000.1719",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2012",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "6.2.9200.0",
        "lessThan": "6.2.9200.25973",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2012 (Server Core installation)",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "6.2.9200.0",
        "lessThan": "6.2.9200.25973",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2012 R2",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "6.3.9600.0",
        "lessThan": "6.3.9600.23074",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2012 R2 (Server Core installation)",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "6.3.9600.0",
        "lessThan": "6.3.9600.23074",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2016",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.14393.0",
        "lessThan": "10.0.14393.8957",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2016 (Server Core installation)",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.14393.0",
        "lessThan": "10.0.14393.8957",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2019",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.17763.0",
        "lessThan": "10.0.17763.8511",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2019 (Server Core installation)",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.17763.0",
        "lessThan": "10.0.17763.8511",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2022",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.20348.0",
        "lessThan": "10.0.20348.4893",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2022, 23H2 Edition (Server Core installation)",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.25398.0",
        "lessThan": "10.0.25398.2207",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2025",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.26100.0",
        "lessThan": "10.0.26100.32522",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2025 (Server Core installation)",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.26100.0",
        "lessThan": "10.0.26100.32522",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  }
]
ParameterPositionPathDescriptionCWE
/tcpport:12345path\\127.0.0.1\testSMB NTLM reflection PoC using arbitrary port to coerce LSASS authentication to attacker-controlled SMB server and relay to real SMB service.CWE-287
-port 12345path\\127.0.0.1\testSMB NTLM reflection PoC using arbitrary port to coerce LSASS authentication to attacker-controlled SMB server and relay to real SMB service.CWE-287
-relay-port 6666path\\127.0.0.1\testSMB NTLM reflection PoC using arbitrary port to coerce LSASS authentication to attacker-controlled SMB server and relay to real SMB service.CWE-287
net use \\127.0.0.1\test /tcpport:12345 /user:user userpath\\127.0.0.1\testSMB NTLM reflection PoC using arbitrary port to coerce LSASS authentication to attacker-controlled SMB server and relay to real SMB service.CWE-287

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

14 Apr 2026 16:35Current
5.8Medium risk
Vulners AI Score5.8
CVSS 3.17.8
EPSS0.00036
SSVC
11