---
id: "CVE-2026-108416"
page: "https://infrastack.ai/live/CVE-2026-108416"
kind: "vulnerability"
aliases: ["CVE-2026-108416"]
title: "Windows File Server Resource Management: untrusted pointer lets attacker gain privileges"
severity: "medium"
cvss: 6.8
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["file-server", "infrastructure", "windows"]
not_affected_if: ["physical-access-controlled", "service-not-installed"]
published_at: "2026-11-10T19:18:12+00:00"
first_seen_at: "2026-11-10T19:24:23+00:00"
updated_at: "2026-11-10T19:55:48+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-108416", "first_seen_at": "2026-11-10T19:24:23+00:00"}]
exploit_sources: []
---

# Windows File Server Resource Management: untrusted pointer lets attacker gain privileges

Link for people: https://infrastack.ai/live/CVE-2026-108416 (this .md is for agents)

Windows File Server Resource Management Service dereferences an untrusted pointer, which lets an unauthorized attacker elevate privileges. The description says the attack requires physical access to the machine.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Confirm the File Server Resource Management service (`SrmSvc`) is present on the Windows host, for example with `Get-Service SrmSvc` in PowerShell
- Check the Windows build against Microsoft's security update guide for CVE-2026-108416

## Timeline

- 2026-11-10T19:24:23+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-108416

## From the sources

Untrusted pointer dereference in Windows File Server Resource Management Service allows an unauthorized attacker to elevate privileges with a physical attack.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_