CVE-2026-71330

HighCVSS 7.5/10Last modified Sep 24, 2026

Description

Exposure of sensitive system information to an unauthorized control sphere in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to disclose information over a network.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-497

Affected software

No affected versions have been published.

Timeline

Published
Sep 8, 2026
Last modified
Sep 24, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-713318.1Integer overflow or wraparound in Windows Device Health Attestation (DHA) allows an unauthorized attacker to execute code over a network.CVE-2026-713327.0Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate privileges locally.CVE-2026-713337.0Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.CVE-2026-713347.8Heap-based buffer overflow in Windows NFS Portmapper allows an authorized attacker to elevate privileges locally.CVE-2026-713368.8Integer overflow or wraparound in Windows Work Folder Service allows an authorized attacker to execute code over a network.CVE-2026-713377.8Stack-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally.CVE-2026-713386.4Double free in Windows Failover Cluster allows an authorized attacker to elevate privileges locally.CVE-2026-713396.7Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.CVE-2026-71344.7A vulnerability was identified in code-projects Online Lot Reservation System 1.0. Affected is an unknown function of the file /edithousepicCVE-2026-713407.0Use after free in Windows File History Service allows an authorized attacker to elevate privileges locally.CVE-2026-713415.5Out-of-bounds read in Windows Partition Management Driver allows an authorized attacker to disclose information locally.CVE-2026-713427.0Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
CVE-2026-71330: High severity, CVSS 7.5 | Vulnix