CVE-2021-26432

CriticalCVSS 9.8

Published: 12/08/2021(UTC)Updated: 10/08/2026(UTC)Translated: 10/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

10.33%

95th percentile - higher than 95% of all known CVEs

Summary

Remote code execution vulnerability in the Windows Services for NFS ONCRPC XDR driver. It could allow an attacker to execute code in the kernel context.

Risk Assessment

An attacker could exploit this vulnerability to take control of the system if the NFS service is exposed to the network.

Recommendation

Install Windows security updates and restrict access to NFS services.

Other vulnerabilities in Windows Services for NFS

See all

CVE-2021-36933High
Information disclosure vulnerability in the ONCRPC XDR driver of Windows Services for NFS. Could lead to data exposure.
CVE-2021-36932High
Information disclosure vulnerability in the ONCRPC XDR driver of Windows Services for NFS. Could lead to data exposure.
CVE-2021-36926High
Information disclosure vulnerability in the ONCRPC XDR driver of Windows Services for NFS. Could lead to data exposure.

Original NVD description (English source)

Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability