{"id":"CVE-2026-108416","kind":"vulnerability","aliases":["CVE-2026-108416"],"related":[],"title":"Windows File Server Resource Management: untrusted pointer lets attacker gain privileges","description":"Untrusted pointer dereference in Windows File Server Resource Management Service allows an unauthorized attacker to elevate privileges with a physical attack.","summary":"Windows File Server Resource Management Service dereferences an untrusted pointer, which lets an unauthorized attacker elevate privileges. The description says the attack requires physical access to the machine.","severity":"medium","cvss":6.8,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["file-server","infrastructure","windows"],"not_affected_if":["physical-access-controlled","service-not-installed"],"how_to_check":"- Confirm the File Server Resource Management service (`SrmSvc`) is present on the Windows host, for example with `Get-Service SrmSvc` in PowerShell\n- Check the Windows build against Microsoft's security update guide for CVE-2026-108416","fix":null,"status":"open","published_at":"2026-11-10T19:18:12+00:00","first_seen_at":"2026-11-10T19:24:23+00:00","triaged_at":"2026-11-10T19:55:48+00:00","updated_at":"2026-11-10T19:55:48+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-10T19:55:48Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Windows File Server Resource Management: untrusted pointer lets attacker gain privileges","impact":"high","summary":"Windows File Server Resource Management Service dereferences an untrusted pointer, which lets an unauthorized attacker elevate privileges. The description says the attack requires physical access to the machine.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["windows","file-server"],"confidence":0.5,"fix_status":"unknown","needs_auth":"unknown","worst_case":"local attacker gains elevated privileges on the Windows server","analyst_note":"Check the NVD entry and Microsoft's advisory for affected Windows builds, patch versions and whether the service must be enabled.","how_to_check":"- Confirm the File Server Resource Management service (`SrmSvc`) is present on the Windows host, for example with `Get-Service SrmSvc` in PowerShell\n- Check the Windows build against Microsoft's security update guide for CVE-2026-108416\n- unknown for other checks: the sources do not say","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["service-not-installed","physical-access-controlled"],"who_is_affected":"Windows servers running the File Server Resource Management Service are the systems to look at, and the description says exploitation needs physical access. Machines where the service is not installed or where physical access is tightly controlled are less exposed. The sources do not say which Windows builds are affected.","user_interaction":"unknown","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000726,"input_tokens":4504,"output_tokens":552,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-108416':14A,17A '-2026':13A,16A 'access':47B 'allow':61C 'attack':9A,37B,44B,64C,71C 'cve':12A,15A 'derefer':29B,53C 'descript':41B 'elev':38B,66C 'file':2A,19B,24B,56C 'file-serv':18B 'gain':10A 'infrastructur':21B 'let':8A,34B 'machin':50B 'manag':5A,27B,59C 'physic':46B,70C 'pointer':7A,32B,52C 'privileg':11A,39B,67C 'requir':45B 'resourc':4A,26B,58C 'say':42B 'server':3A,20B,25B,57C 'servic':28B,60C 'unauthor':36B,63C 'untrust':6A,31B,51C 'window':1A,22B,23B,55C","nicknames":[],"mitigations":[],"who_affected":"Windows servers running the File Server Resource Management Service are the systems to look at, and the description says exploitation needs physical access. Machines where the service is not installed or where physical access is tightly controlled are less exposed. The sources do not say which Windows builds are affected.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["fileserver","infrastructure","medium","windows"],"campaign_type":null,"search_a":"'-108416':14A,17A '-2026':13A,16A 'attack':9A 'cve':12A,15A 'file':2A 'gain':10A 'let':8A 'manag':5A 'pointer':7A 'privileg':11A 'resourc':4A 'server':3A 'untrust':6A 'window':1A","search_b":"'access':47B 'attack':37B,44B 'derefer':29B 'descript':41B 'elev':38B 'file':19B,24B 'file-serv':18B 'infrastructur':21B 'let':34B 'machin':50B 'manag':27B 'physic':46B 'pointer':32B 'privileg':39B 'requir':45B 'resourc':26B 'say':42B 'server':20B,25B 'servic':28B 'unauthor':36B 'untrust':31B 'window':22B,23B","search_c":"'allow':61C 'attack':64C,71C 'derefer':53C 'elev':66C 'file':56C 'manag':59C 'physic':70C 'pointer':52C 'privileg':67C 'resourc':58C 'server':57C 'servic':60C 'unauthor':63C 'untrust':51C 'window':55C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:18:12+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-108416","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108416","severity":null,"published_at":"2026-11-10T19:18:12+00:00","modified_at":"2026-11-10T19:18:12+00:00","first_seen_at":"2026-11-10T19:24:23+00:00","fetched_at":"2026-11-10T19:24:23+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}