CVE-2026-69949
HighCVSS 7.8Summary
Heap-based buffer overflow in Windows Client for NFS. An authorized attacker can exploit this flaw to elevate privileges locally.
Risk Assessment
The flaw enables local privilege escalation, potentially allowing an attacker to execute code or access higher-privileged resources.
Recommendation
Immediately apply Microsoft patches for the Windows NFS client and limit local logon to necessary accounts.
Other vulnerabilities in Windows Client for NFS
See all- CVE-2026-70113High
Integer overflow or wraparound in the Windows Client for NFS allows an authorized attacker to elevate privileges locally.
- CVE-2026-69955Medium
Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network.
- CVE-2026-69940Medium
Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network.
Original NVD description (English source)
Heap-based buffer overflow in Windows Client for NFS allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS