Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
4594 articles · 258037 vulns · 37/41 feeds (7d)
← Back to list
9.8
CVE-2026-69595PATCHED
microsoft · windows_server_2012

Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability

Description

Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code over a network.

Affected Products

VendorProductVersions
microsoftwindows_server_20126.2.9200.0, 6.2.9200.0, 6.3.9600.0, 6.3.9600.0, 10.0.14393.0, 10.0.14393.0, 10.0.17763.0, 10.0.17763.0, 10.0.20348.0, 10.0.26100.0, 10.0.26100.0

Also Affects

Downstream vendors/products affected by this vulnerability

VendorProductSourceConfidence
microsoftmicrosoft windowscert_advisory90%
microsoftmicrosoft windows server 2012 r2cert_advisory90%
microsoftwindows_server_2016cve_cpe95%
microsoftwindows_server_2019cve_cpe95%
microsoftwindows_server_2022cve_cpe95%

References

  • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69595(vendor-advisory, patch)

Related News (4 articles)

Tier E
Hacker News3h ago
Live CVE Feed to Keep Your Agent Up to Speed
→ No new info (linked only)
Tier B
BSI Advisories51d ago
[NEU] [kritisch] Microsoft Windows: Mehrere Schwachstellen
→ No new info (linked only)
Tier D
The Hacker News51d ago
Microsoft Patches Record 974 Flaws, Including Two Exploited Windows Zero-Days
→ No new info (linked only)
Tier A
Microsoft MSRC52d ago
CVE-2026-69595 Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability
→ No new info (linked only)

Discussion (0)

Loading…

CVSS 3.19.8 CRITICAL
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
CISA KEV❌ No
Actively exploited❌ No
Patch available
6.2.9200.263496.3.9600.2339710.0.14393.951210.0.17763.924510.0.20348.562210.0.26100.33438
CWECWE-416
PublishedSep 8, 2026
Last enriched52d ago
Trending Score63
Source articles4
Independent4
Info Completeness3/14
Missing: vendor, product, versions, cvss, epss, cwe, kev, exploit, patch, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

HIGHCVE-2026-81963EXPKEV
Windows Update Stack Elevation of Privilege Vulnerability
Trending: 155
CRITICALCVE-2026-80098
Copilot Studio Elevation of Privilege Vulnerability
Trending: 71
CRITICALCVE-2026-70352
Azure AI Language Elevation of Privilege Vulnerability
Trending: 71
CRITICALCVE-2026-83711
Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability
Trending: 68
HIGHCVE-2026-83498
Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
Trending: 61

Pin to Dashboard

Verification

State: verified
Confidence: 0%

Vulnerability Timeline

CVE Published
Sep 8, 2026
Discovered by ZDM
Sep 8, 2026
Patch Available
Oct 30, 2026