Summary
Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.
Details
What kind of security feature could be bypassed by successfully exploiting this vulnerability?
Successfully exploiting this vulnerability could allow an attacker to bypass network security protections that rely on Fully Qualified Domain Name (FQDN)‑based rules, such as policies that block or allow network connections based on domain names. This could reduce the effectiveness of security features that depend on those domain‑based network controls.
Security updates
10.0.26300.9711 — https://support.microsoft.com/help/5127648
10.0.20348.5761 — https://support.microsoft.com/help/5126655
10.0.26100.33650 — https://support.microsoft.com/help/5126646
10.0.22631.7652 — https://support.microsoft.com/help/5126653
10.0.28000.3231 — https://support.microsoft.com/help/5127646
Vulnerabilities 1
-
Medium 5.5
Windows SMB Client Security Feature Bypass Vulnerability
Incorrect authorization in Windows SMB Client allows an authorized attacker to bypass a security feature locally.
Revision history
-
#1
Information published.
References
-
CVE-2026-84011 Windows SMB Client Security Feature Bypass Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84011
-
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
-
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
-
Common Vulnerability Scoring System
https://www.first.org/cvss