CVE-2021-26432

CriticalCVSS 9.8

Published: 12/08/2021(UTC)Updated: 10/08/2026(UTC)Translated: 10/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

10.33%

95th percentile - higher than 95% of all known CVEs

Summary

Remote code execution vulnerability in the Windows Services for NFS ONCRPC XDR driver. It could allow an attacker to execute code in the kernel context.

Risk Assessment

An attacker could exploit this vulnerability to take control of the system if the NFS service is exposed to the network.

Recommendation

Install Windows security updates and restrict access to NFS services.

Original NVD description (English source)

Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability