CVE-2026-69424
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk24th percentile - higher than 24% of all known CVEs
Summary
Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to elevate privileges locally.
Risk Assessment
An authorized user could gain elevated privileges, potentially leading to unauthorized access to resources.
Recommendation
Apply Windows security updates to mitigate the risk of privilege escalation.
Other vulnerabilities in Windows Distributed File System (DFS)
See all- CVE-2026-85931High
Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.
- CVE-2026-85798High
A heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.
- CVE-2026-78446High
Use after free in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.
- CVE-2024-30063Medium
A remote code execution vulnerability in Windows Distributed File System (DFS) allows an attacker to execute arbitrary code remotely in the user context. Exploitation requires sending a specially crafted request to the DFS service.
Original NVD description (English source)
Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

