2288 matches found
CVE-2026-69372
CVE-2026-69372 is an out-of-bounds read in Windows Network File System (NFS) that allows an authorized attacker (low privileges) to trigger a denial of service over a network. The attack vector is network-based with low complexity, but user interaction is required . CVSS v3.1 base score is 5.7 (M...
CVE-2026-69772
CVE-2026-69772 is a heap-based buffer overflow in Windows Network File System (NFS) that allows an unauthorized attacker to execute code over a network, achieving full remote code execution. The Microsoft-assigned CVSS 3.1 score is 8.8 (HIGH) with vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indic...
Windows Network File System Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Network File System allows an unauthorized attacker to execute code over a network...
Windows Network File System Denial of Service Vulnerability
Out-of-bounds read in Windows Network File System allows an authorized attacker to deny service over a network...
CVE-2026-69372: Out-of-bounds Read
Out-of-bounds read in Windows Network File System allows an authorized attacker to deny service over a network...
PT-2026-87709
Heap-based buffer overflow in Windows Network File System allows an unauthorized attacker to execute code over a network...
CVE-2026-69772: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Network File System allows an unauthorized attacker to execute code over a network...
PT-2026-87410
Out-of-bounds read in Windows Network File System allows an authorized attacker to deny service over a network...
RLSA-2026:61887 Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: seccomp: passthrough uretprobe systemcall without filtering CVE-2025-21834 kernel: ip6tunnel: use skbvlaninetprepare in ip6tnlrcv CVE-2026-23003 kernel: netfilter: nftables: Fix for...
Security Bulletin: IBM i is Affected By Denial of Service Vulnerabilities in NFS [CVE-2026-17057, CVE-2026-17207]
Summary IBM i is vulnerable to denial of service due to missing authentication and a buffer overflow CVE-2026-17057, CVE-2026-17207 in Network File System NFS as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-17057 DESCRIPTION: IBM i could allow a remote...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: NFSv4.2: Rework the handling of scratch space for READPLUS again. I found that the read code might send multiple requests using the same nfspgioheader, but nfs4procreadsetup is only called once. As a result, we sometimes had to...
Astra Linux – Vulnerability in Linux 5.15
In the Linux kernel, the following vulnerabilities have been resolved: lockd: Other missing fields are set when unlocking files. The vfslockfile function expects that the struct filelock structure is fully initialized by the caller. If the flfile field is NULL after re-exporting NFSv3, an OOP err...
Astra Linux – Vulnerability in Linux
In the Linux kernel, the following vulnerability has been resolved: NFSv4: Fixed a NULL pointer dereference in pnfsmarkmatchinglsegsreturn. The commit de144ff4234f fixes the issue by changing pnfsreturnlayout to call pnfsmarkmatchinglsegsreturn, with NULL passed as the argument to the...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerabilities have been resolved: NFSv4: Fixed an error in pnfsmarkrequestcommit, when performing ODIRECT operations. Fixed an error-prone condition in pnfsmarkrequestcommit, when adding a set of write operations to the commit list in order to reschedule them...
Astra Linux – Vulnerability in Linux 5.15, Linux
In the Linux kernel, the following vulnerability has been resolved: NFSD: prevented underflow in nfssvcdecodewriteargs Smatch reported the issue as follows: fs/nfsd/nfsxdr.c:341 nfssvcDecodeWriteArgs Warning: no lower bound on ‘args-len’ The type of the variable has been changed to unsigned to...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerabilities have been resolved: NFSD: Fixed the handling of large file sizes in NFSv3 SETATTR/CREATE procedures. iattr::iasize is a lofft; therefore, these NFSv3 procedures must be careful to handle incoming client size values that are larger than s64max...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerabilities have been resolved: nfsd: Fixed the handling of cached open files in the nfsd4open code path. The commit fb70bf124b05 “NFSD: Instantiate a struct file when creating a regular NFSv4 file” added the ability to cache an open file descriptor across...
EUVD-2026-56467
Buffer over-read in Windows Network File System allows an unauthorized attacker to deny service over a network...
