CVE-2026-85931
HighCVSS 8.8Exploitation Probability (EPSS)
Elevated risk57th percentile - higher than 57% of all known CVEs
Summary
Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.
Risk Assessment
An attacker can remotely execute arbitrary code in the context of the DFS service, potentially leading to file server compromise and lateral movement.
Recommendation
Immediately apply security updates for Windows DFS and restrict network access to DFS services from untrusted network segments.
Other vulnerabilities in Windows Distributed File System (DFS)
See all- CVE-2026-85798High
A heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.
- CVE-2026-78446High
Use after free in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.
- CVE-2026-69424High
Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to elevate privileges locally.
- CVE-2024-30063Medium
A remote code execution vulnerability in Windows Distributed File System (DFS) allows an attacker to execute arbitrary code remotely in the user context. Exploitation requires sending a specially crafted request to the DFS service.
Original NVD description (English source)
Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS