EUVD-2026-73061
GHSA-wvc3-cww7-9p6r
Severity by source
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Network-reachable NFS heap overflow requires no credentials; UI:R reflects client-initiated operation needed to trigger the vulnerable parsing path.
Primary rating from Vendor (microsoft).
CVSS VectorVendor: microsoft
Lifecycle Timeline
3DescriptionCVE.org
Heap-based buffer overflow in Windows Network File System allows an unauthorized attacker to execute code over a network.
AnalysisAI
Heap-based buffer overflow in the Windows Network File System (NFS) component enables remote attackers to execute arbitrary code on unpatched Windows Server and Windows 10/11 systems where NFS services are active. The CVSS vector (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) indicates network-reachable exploitation with no privilege requirement but a user-interaction dependency - consistent with a client-side NFS processing scenario or triggered NFS operation. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The NFS Server role (Services for NFS) or NFS Client feature must be explicitly installed and active on the target Windows system - neither is enabled by default on most Windows configurations, making this an opt-in attack surface primarily relevant to Windows Server environments providing Unix/Linux interoperability. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | CVSS 8.8 (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) signals high severity with a network attack vector, low complexity, and full C/I/A impact, but the UI:R constraint differentiates this from fully wormable exploits and reduces the likelihood of mass automated exploitation compared to UI:N network bugs. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the Microsoft security updates corresponding to each affected platform, patching to or beyond the fixed build ceilings listed in the EUVD data: Windows Server 2025 to 10.0.26100.33438, Windows Server 2022 to 10.0.20348.5622, Windows Server 2019 to 10.0.17763.9245, Windows Server 2016 to 10.0.14393.9512, Windows Server 2012 R2 to 6.3.9600.23397, and Windows Server 2012 to 6.2.9200.26349; Windows 10 and 11 versions should be updated to the corresponding cumulative update builds listed above. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory all Windows systems with NFS services enabled (Windows Server 2012-2025, Windows 10/11) to identify exposure scope and prioritize critical file servers. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-122 – Heap-based Buffer Overflow
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today