{"id":"CVE-2026-83789","published":"2026-10-13T19:20:28.570","lastModified":"2026-10-16T16:21:32.573","description":"Heap-based buffer overflow in Windows SMB Client allows an unauthorized attacker to elevate privileges over a network.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwes":["CWE-122"],"vendors":[],"products":[],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83789","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A heap-based buffer overflow in the Windows SMB client allows remote attackers to execute arbitrary code with system privileges by sending specially crafted SMB packets. This vulnerability can be exploited without authentication and leads to complete system compromise.","exploitability":"Exploitation is relatively straightforward requiring only network access to send malformed SMB packets, with no authentication needed for initial exploitation though privilege escalation may require additional conditions.","blast_radius":"The vulnerability affects all Windows systems that use SMB client functionality, potentially impacting enterprise networks where SMB is commonly used for file sharing and remote access, making it highly impactful across multiple systems.","remediation":"Apply the Microsoft patch KB5068437 or upgrade to Windows 10 version 22H2 or later with the latest cumulative updates.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","smb","privilege-escalation","network"],"model":"garnet-coder","analyzedAt":"2026-10-18T09:59:17.300Z"}}