CVE-2026-118141

HighCVSS 8.8/10Last modified Nov 10, 2026

Description

Stack-based buffer overflow in Windows Client for NFS allows an unauthorized attacker to execute code over a network.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-121

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Nov 10, 2026
Last modified
Nov 10, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-1181427.8Out-of-bounds read in Windows Distributed File System (DFS) allows an authorized attacker to elevate privileges locally.CVE-2026-1181436.8Out-of-bounds read in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack.CVE-2026-1181446.6Heap-based buffer overflow in Windows Smart Card allows an authorized attacker to elevate privileges with a physical attack.CVE-2026-1181457.5Use after free in Windows Function Discovery SSDP Provider allows an unauthorized attacker to execute code over an adjacent network.CVE-2026-1181468.8Incorrect authorization in Active Directory Domain Services allows an authorized attacker to execute code over a network.CVE-2026-1181477.4Improper certificate validation in Visual Studio allows an unauthorized attacker to perform spoofing over a network.CVE-2026-1181487.5Improper authentication in Active Directory Domain Services allows an authorized attacker to elevate privileges over a network.CVE-2026-1181498.8Improper control of generation of code ('code injection') in Microsoft Exchange Server allows an authorized attacker to execute code over a CVE-2026-118155.3An attacker who intercepts and tampers with traffic between the client application and the API Gateway server could potentially deserialize CVE-2026-1181508.8Authorization bypass through user-controlled key in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a netCVE-2026-1181517.2External control of file name or path in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.CVE-2026-1181526.5Cross-site request forgery (csrf) in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-118141: High severity, CVSS 8.8 | Vulnix