PT-2026-87989 · Microsoft · Windows+6

CVE-2026-78445

·

Published

2026-09-08

·

Updated

2026-09-12

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
🚨 CRITICAL: CVE-2026-78445 (CVSS 9.8)
Use-after-free in Windows Services for NFS ONCRPC XDR Driver enables unauthenticated RCE over network. No user interaction required.
Patch immediately.
#CVE #Vulnerability #PatchNow #ThreatIntel #DFIR https://t.co/L89LsUn6sU

Fix

RCE

Use After Free

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2026-78445

Affected Products

Windows
Windows Server 2012
Windows Server 2012 R2
Windows Server 2016
Windows Server 2019
Windows Server 2022
Windows Server 2025