CVE-2026-83989: Windows Services for NFS ONCRPC XDR Driver Denial of Service Vulnerability
Out-of-bounds read in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to deny service over a network.
Other sources
Windows Services for NFS ONCRPC XDR Driver Denial of Service Vulnerability
— Microsoft
Affected Software
Remediation
Event History
Frequently Asked Questions
What access does an attacker need to trigger the denial of service?
The vulnerability is remotely exploitable over a network and requires no authentication or user interaction. An attacker can target an affected system without prior privileges.
What is the expected impact of successful exploitation?
Successful exploitation can deny service on the affected system. The provided impact information indicates availability impact only; it does not indicate confidentiality or integrity impact.
Which systems should be assessed for exposure?
Assess systems running Microsoft Windows 10, Windows 11, or Windows Server 2012, 2012 R2, 2016, 2019, 2022, or 2025, particularly where Windows Services for NFS and its ONCRPC XDR functionality are present and reachable over the network.