CVE-2026-105723
Microsoft · Published October 13, 2026
7.5
CVSS v3.1
HIGHPatch availableGet patch
Description
Windows Distributed File System (DFS) Elevation of Privilege Vulnerability. Untrusted pointer dereference in Windows Distributed File System (DFS) allows an unauthorized attacker to elevate privileges over a network.
Affected Products
- Windows Server 2012
- Windows Server 2012 (Server Core installation)
- Windows Server 2012 R2
- Windows Server 2012 R2 (Server Core installation)
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C