CVE-2026-69372
MediumCVSS 5.7Exploitation Probability (EPSS)
Elevated risk57th percentile - higher than 57% of all known CVEs
Summary
The vulnerability in Windows Network File System is an out-of-bounds read. It allows an authorized attacker to deny service over a network.
Risk Assessment
The risk includes the possibility of causing NFS service failure, which may lead to data unavailability.
Recommendation
Install security updates for Windows. Restrict access to NFS services and monitor network traffic.
Other vulnerabilities in Windows Network File System
See all- CVE-2026-69772High
Heap-based buffer overflow in Windows Network File System allows an unauthorized attacker to execute code over a network.
- CVE-2026-68819Medium
Buffer over-read in Windows Network File System allows an unauthorized attacker to deny service over a network.
- CVE-2026-56650High
Heap-based buffer overflow in Windows Network File System allows an authorized attacker to elevate privileges locally.
- CVE-2026-56649Medium
A race condition exists in Windows Network File System when using a shared resource concurrently. An unauthorized attacker can exploit this to execute code remotely over the network.
- CVE-2026-56648High
A time-of-check time-of-use (TOCTOU) race condition in Windows Network File System allows an authorized attacker to elevate privileges over a network.
- CVE-2026-56194High
Heap-based buffer overflow vulnerability in Windows Network File System allows an authorized attacker to elevate privileges over a network.
Original NVD description (English source)
Out-of-bounds read in Windows Network File System allows an authorized attacker to deny service over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS