CyberICT

CVE-2026-70585

Microsoft · Published September 8, 2026

CVSS v3.1

HIGH
Patch availableGet patch

Description

Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability. Use after free in Windows Services for NFS ONCRPC XDR Driver allows an authorized attacker to execute code locally.

Affected Products

  • Windows Server 2019
  • Windows Server 2019 (Server Core installation)
  • Windows Server 2022
  • Windows Server 2022 (Server Core installation)

CVSS Vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C