CVE-2026-85798
7.2HighPublished 13 Oct 2026 · NVD status: Analyzed · AI triage by gemini-3.8-flash
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- High
- User interaction
- None
- Impact
- Full C/I/A compromise
- Weakness
- CWE-122
Impact
An authenticated attacker with high privileges can execute arbitrary code over the network on affected Windows DFS servers. They need network access to DFS and high-privilege credentials.
Root cause
A heap-based buffer overflow flaw in the Windows Distributed File System (DFS) service leads to memory corruption during network processing.
Affected systems
Versions not listed — check the vendor advisory.
CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Fix & remediation
Install the security update from Microsoft's MSRC portal for this advisory. As an interim workaround if you cannot immediately reboot, restrict inbound network access to DFS and SMB ports (such as TCP port 445) to trusted management subnets only.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.
References
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85798Vendor AdvisoryPatch