CVE-2026-78445
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk60th percentile - higher than 60% of all known CVEs
Summary
Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code over a network.
Risk Assessment
An attacker can remotely execute code in the kernel, potentially leading to full system compromise or crash.
Recommendation
Install the latest security updates for Windows. Restrict access to NFS services on the network.
Other vulnerabilities in Windows Services for NFS ONCRPC XDR Driver
See all- CVE-2026-69595Critical
Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code over a network.
- CVE-2026-83989High
Out-of-bounds read in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to deny service over a network.
- CVE-2026-73024High
Heap-based buffer overflow in Windows Services for NFS ONCRPC XDR Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-71330High
Exposure of sensitive system information to an unauthorized control sphere in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to disclose information over a network.
- CVE-2026-70585High
Use after free in Windows Services for NFS ONCRPC XDR Driver allows an authorized attacker to execute code locally.
- CVE-2021-26433High
Information disclosure vulnerability in Windows Services for NFS ONCRPC XDR driver. An attacker could access sensitive data.
Original NVD description (English source)
Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS