CVE-2026-68819: Windows Network File System Denial of Service Vulnerability
Buffer over-read in Windows Network File System allows an unauthorized attacker to deny service over a network.
Other sources
Windows Network File System Denial of Service Vulnerability
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.2.9200.26279Patch KB5120385 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.14393.9418Patch KB5120418 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26100.33296Fixed in 10.0.26100.33222Patch KB5120228 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.3.9600.23337Patch KB5120386 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.20348.5499Fixed in 10.0.20348.5440Patch KB5120229 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.17763.9115Patch KB5120238
Event History
Frequently Asked Questions
What is the severity of CVE-2026-68819?
CVE-2026-68819 has a medium severity rating of 5.9.
How do I fix CVE-2026-68819?
To fix CVE-2026-68819, apply the latest security updates provided by Microsoft for the affected Windows versions.
What software is affected by CVE-2026-68819?
CVE-2026-68819 affects Microsoft Windows 10, Windows Server 2012, Windows Server 2016, Windows Server 2025, Windows Server 2019, Windows Server 2022, and Windows Server 2012 R2.
What type of vulnerability is CVE-2026-68819?
CVE-2026-68819 is a buffer over-read vulnerability leading to a Denial of Service in the Windows Network File System.
Can CVE-2026-68819 be exploited remotely?
Yes, an unauthorized attacker can exploit CVE-2026-68819 remotely over a network to cause a denial of service.