CVE-2026-73024
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk24th percentile - higher than 24% of all known CVEs
Summary
Heap-based buffer overflow in Windows Services for NFS ONCRPC XDR Driver allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker with local access may gain elevated privileges, potentially leading to unauthorized actions on the system.
Recommendation
Apply vendor security patches and restrict access to the NFS driver to trusted administrators only.
Other vulnerabilities in Windows Services for NFS ONCRPC XDR Driver
See all- CVE-2026-78445Critical
Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code over a network.
- CVE-2026-69595Critical
Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code over a network.
- CVE-2026-83989High
Out-of-bounds read in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to deny service over a network.
- CVE-2026-71330High
Exposure of sensitive system information to an unauthorized control sphere in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to disclose information over a network.
- CVE-2026-70585High
Use after free in Windows Services for NFS ONCRPC XDR Driver allows an authorized attacker to execute code locally.
- CVE-2021-26433High
Information disclosure vulnerability in Windows Services for NFS ONCRPC XDR driver. An attacker could access sensitive data.
Original NVD description (English source)
Heap-based buffer overflow in Windows Services for NFS ONCRPC XDR Driver allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS