CVE-2026-102186
MediumCVSS 4.7Exploitation Probability (EPSS)
Low risk23th percentile - higher than 23% of all known CVEs
Summary
Untrusted pointer dereference in Windows Network File System allows an authorized attacker to disclose information locally.
Risk Assessment
Risk includes unauthorized access to data in the network file system, potentially leading to information disclosure.
Recommendation
Update Windows and implement appropriate access controls.
Other vulnerabilities in Windows Network File System
See all- CVE-2026-96209High
An out-of-bounds read vulnerability in Windows Network File System allows an authenticated attacker to elevate privileges locally. The flaw stems from improper reading of data beyond buffer boundaries.
- CVE-2026-70143High
Heap-based buffer overflow in Windows Network File System. An authorized attacker can exploit this to execute code locally.
- CVE-2026-69675Medium
An out-of-bounds read vulnerability in Windows Network File System allows an authorized attacker to disclose information locally.
- CVE-2026-69772High
Heap-based buffer overflow in Windows Network File System allows an unauthorized attacker to execute code over a network.
- CVE-2026-69372Medium
The vulnerability in Windows Network File System is an out-of-bounds read. It allows an authorized attacker to deny service over a network.
- CVE-2026-68819Medium
Buffer over-read in Windows Network File System allows an unauthorized attacker to deny service over a network.
- CVE-2026-56650High
Heap-based buffer overflow in Windows Network File System allows an authorized attacker to elevate privileges locally.
- CVE-2026-56649Medium
A race condition exists in Windows Network File System when using a shared resource concurrently. An unauthorized attacker can exploit this to execute code remotely over the network.
- CVE-2026-56648High
A time-of-check time-of-use (TOCTOU) race condition in Windows Network File System allows an authorized attacker to elevate privileges over a network.
- CVE-2026-56194High
Heap-based buffer overflow vulnerability in Windows Network File System allows an authorized attacker to elevate privileges over a network.
Original NVD description (English source)
Untrusted pointer dereference in Windows Network File System allows an authorized attacker to disclose information locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS