CVE-2026-113765

HighCVSS 7.8/10Last modified Nov 10, 2026

Description

Heap-based buffer overflow in Windows File Server Resource Management Service allows an authorized attacker to elevate privileges locally.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-122CWE-190

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Nov 10, 2026
Last modified
Nov 10, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-1137663.3Weak authentication in Windows Language Experience Service allows an authorized attacker to perform tampering locally.CVE-2026-1137677.8Inclusion of functionality from untrusted control sphere in Windows COM+ Event System Service allows an authorized attacker to elevate priviCVE-2026-1137687.5Heap-based buffer overflow in Windows Performance Counters allows an unauthorized attacker to execute code over a network.CVE-2026-1137697.0Use after free in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.CVE-2026-1137707.0Untrusted pointer dereference in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.CVE-2026-1137715.5Off-by-one error in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.CVE-2026-1137724.7Time-of-check time-of-use (toctou) race condition in Windows Redirected Drive Buffering allows an authorized attacker to disclose informatioCVE-2026-1137735.3Improper access control in Windows DHCP Server allows an unauthorized attacker to perform spoofing over a network.CVE-2026-1137757.8A maliciously crafted dynamic library, when loaded from an arbitrary path through the TextCommands.LoadDll command exposed by the Autodesk FCVE-2026-1137767.8virtualenv is a tool for creating isolated virtual python environments. From 20.26.6 until 21.14.2, ViaTemplateActivator.instantiate_templatCVE-2026-1137798.8The pfSense REST API package is an unofficial, open-source REST and GraphQL API for pfSense CE and pfSense Plus firewalls. A privilege escalCVE-2026-113788.8IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to an integer overflow i
CVE-2026-113765: High severity, CVSS 7.8 | Vulnix