CVE-2026-85798
HighCVSS 7.2Exploitation Probability (EPSS)
Elevated risk59th percentile - higher than 59% of all known CVEs
Summary
A heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.
Risk Assessment
A network-based attacker with valid credentials can execute arbitrary code on a DFS server, potentially compromising file shares.
Recommendation
Install Windows security updates for DFS and restrict network access to DFS servers to trusted segments.
Other vulnerabilities in Windows Distributed File System (DFS)
See all- CVE-2026-85931High
Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.
- CVE-2026-78446High
Use after free in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.
- CVE-2026-69424High
Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to elevate privileges locally.
- CVE-2024-30063Medium
A remote code execution vulnerability in Windows Distributed File System (DFS) allows an attacker to execute arbitrary code remotely in the user context. Exploitation requires sending a specially crafted request to the DFS service.
Original NVD description (English source)
Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS