CVE-2026-56649

CVE-2026-56649 is a race-condition in Windows Network File System that could let a remote attacker execute code over the network by abusing a shared resource. Public sources (NVD, EUVD, CIRCL) confirm the race condition as the root cause. Microsoft has released updates addressing this vulnerabili...

CVE-2026-56648 Windows NFS Server Elevation of Privilege Vulnerability

...

CVE-2026-56648

CVE-2026-56648 is a Windows Network File System (NFS) server vulnerability described as a time-of-check time-of-use (TOCTOU) race condition that could allow an authorized attacker to elevate privileges over the network. Public sources identify the root cause as a TOCTOU race in NFS and classify t...

CVE-2026-56194 Windows NFS Server Elevation of Privilege Vulnerability

...

CVE-2026-56194 Windows NFS Server Elevation of Privilege Vulnerability

...

EUVD-2026-44258

Heap-based buffer overflow in Windows Network File System allows an authorized attacker to elevate privileges over a network...

Windows NFS Server Elevation of Privilege Vulnerability

Time-of-check time-of-use toctou race condition in Windows Network File System allows an authorized attacker to elevate privileges over a network...

Windows Network File System Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Network File System allows an authorized attacker to elevate privileges locally...

Windows Network File System Remote Code Execution Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Network File System allows an unauthorized attacker to execute code over a network...

Windows NFS Server Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Network File System allows an authorized attacker to elevate privileges over a network...

PT-2026-58617

Time-of-check time-of-use toctou race condition in Windows Network File System allows an authorized attacker to elevate privileges over a network...

CVE-2026-56194: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Network File System allows an authorized attacker to elevate privileges over a network...

PT-2026-58618

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Network File System allows an unauthorized attacker to execute code over a network...

CVE-2026-56650: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Network File System allows an authorized attacker to elevate privileges locally...

CVE-2026-56649: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Network File System allows an unauthorized attacker to execute code over a network...

CVE-2026-56648: Time-of-check Time-of-use (TOCTOU) Race Condition

Time-of-check time-of-use toctou race condition in Windows Network File System allows an authorized attacker to elevate privileges over a network...

PT-2026-58609

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description A heap-based buffer overflow in the Windows Network File System NFS allows an authorized attacker to elevate privileges over a network. A heap-based buffer overflow occurs when a...

PYSEC-2026-2655 MLFlow Creates a Temporary File With Insecure Permissions

In mlflow/mlflow versions prior to 3.11.0, the getorcreatenfstmpdir function in mlflow/utils/fileutils.py creates temporary directories with world-writable permissions 0o777, and the createmodeldownloadingtmpdir function in mlflow/pyfunc/init.py creates directories with group-writable permissions...

MLFlow Creates a Temporary File With Insecure Permissions

In mlflow/mlflow versions prior to 3.11.0, the getorcreatenfstmpdir function in mlflow/utils/fileutils.py creates temporary directories with world-writable permissions 0o777, and the createmodeldownloadingtmpdir function in mlflow/pyfunc/init.py creates directories with group-writable permissions...

CVE-2026-29009

A flaw was found in U-Boot. A buffer overflow vulnerability exists in the nfsreadlinkreply function when the Network File System NFS command is enabled. A malicious or compromised NFS server can exploit this by sending multiple relative symlink targets, exceeding the buffer's capacity. This can...