{"id":"CVE-2026-85931","published":"2026-10-13T19:21:19.310","lastModified":"2026-10-16T16:22:19.520","description":"Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-122"],"vendors":[],"products":[],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85931","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A heap-based buffer overflow in Windows DFS allows authorized attackers to execute arbitrary code remotely. This vulnerability arises from improper bounds checking when processing DFS data structures, potentially enabling remote code execution with high privileges.","exploitability":"Exploitation requires an authenticated user with access to DFS services, making it moderately difficult but possible with a compromised account or legitimate administrative access.","blast_radius":"If exploited, this vulnerability could allow attackers to execute arbitrary code on affected Windows systems with DFS services running, potentially leading to full system compromise and lateral movement across the network.","remediation":"Apply the latest Windows updates containing the fix for CVE-2026-85931, specifically the July 2026 security updates for Windows Server 2019, Windows Server 2022, and Windows 10/11 versions.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","dfs","windows","privilege-escalation"],"model":"garnet-coder","analyzedAt":"2026-10-18T10:00:52.750Z"}}