CVE-2026-78446
HighCVSS 7.5Exploitation Probability (EPSS)
Elevated risk56th percentile - higher than 56% of all known CVEs
Summary
Use after free in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.
Risk Assessment
An authorized attacker can execute code remotely, potentially leading to system compromise or privilege escalation.
Recommendation
Install the latest Windows security updates.
Other vulnerabilities in Windows Distributed File System (DFS)
See all- CVE-2026-85931High
Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.
- CVE-2026-85798High
A heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.
- CVE-2026-69424High
Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to elevate privileges locally.
- CVE-2024-30063Medium
A remote code execution vulnerability in Windows Distributed File System (DFS) allows an attacker to execute arbitrary code remotely in the user context. Exploitation requires sending a specially crafted request to the DFS service.
Original NVD description (English source)
Use after free in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS