{"id":"CVE-2026-108421","kind":"vulnerability","aliases":["CVE-2026-108421"],"related":[],"title":"Windows File Server Resource Management: out-of-bounds read enables network privilege escalation","description":"Out-of-bounds read in Windows File Server Resource Management Service allows an unauthorized attacker to elevate privileges over a network.","summary":"A memory out-of-bounds read in the Windows File Server Resource Management Service lets an unauthorized attacker raise their privileges over the network. The source reports a CVSS score of 7.5 (high) and no known exploitation in the wild.","severity":"high","cvss":7.5,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["file-server","infrastructure","windows"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T19:18:13+00:00","first_seen_at":"2026-11-10T19:24:23+00:00","triaged_at":"2026-11-10T19:47:25+00:00","updated_at":"2026-11-10T19:47:25+00:00","category":"infrastructure","confidence":0.4,"triage":{"at":"2026-11-10T19:47:25Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"Windows File Server Resource Management: out-of-bounds read enables network privilege escalation","impact":"high","summary":"A memory out-of-bounds read in the Windows File Server Resource Management Service lets an unauthorized attacker raise their privileges over the network. The source reports a CVSS score of 7.5 (high) and no known exploitation in the wild.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["windows","file-server"],"confidence":0.4,"fix_status":"unknown","needs_auth":"no","worst_case":"Attacker gains elevated privileges on a networked Windows file server","analyst_note":"Find the Microsoft advisory for CVE-2026-108421 to get affected Windows builds, the patch KB, and whether FSRM must be enabled.","how_to_check":"- unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Windows Server systems running the File Server Resource Management Service are the ones to look at. The sources do not list affected Windows versions or whether the service must be enabled, so the exact exposure is unknown.","user_interaction":"unknown","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000672,"input_tokens":4499,"output_tokens":444,"severity_before":"high"},"analyst_status":"queued","analyst_note":"Find the Microsoft advisory for CVE-2026-108421 to get affected Windows builds, the patch KB, and whether FSRM must be enabled.","search":"'-108421':17A,20A '-2026':16A,19A '7.5':58B 'allow':79C 'attack':44B,82C 'bound':9A,31B,70C 'cve':15A,18A 'cvss':55B 'elev':84C 'enabl':11A 'escal':14A 'exploit':63B 'file':2A,22B,36B,74C 'file-serv':21B 'high':59B 'infrastructur':24B 'known':62B 'let':41B 'manag':5A,39B,77C 'memori':27B 'network':12A,50B,88C 'out-of-bound':6A,28B,67C 'privileg':13A,47B,85C 'rais':45B 'read':10A,32B,71C 'report':53B 'resourc':4A,38B,76C 'score':56B 'server':3A,23B,37B,75C 'servic':40B,78C 'sourc':52B 'unauthor':43B,81C 'wild':66B 'window':1A,25B,35B,73C","nicknames":[],"mitigations":[],"who_affected":"Windows Server systems running the File Server Resource Management Service are the ones to look at. The sources do not list affected Windows versions or whether the service must be enabled, so the exact exposure is unknown.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["fileserver","high","infrastructure","windows"],"campaign_type":null,"search_a":"'-108421':17A,20A '-2026':16A,19A 'bound':9A 'cve':15A,18A 'enabl':11A 'escal':14A 'file':2A 'manag':5A 'network':12A 'out-of-bound':6A 'privileg':13A 'read':10A 'resourc':4A 'server':3A 'window':1A","search_b":"'7.5':58B 'attack':44B 'bound':31B 'cvss':55B 'exploit':63B 'file':22B,36B 'file-serv':21B 'high':59B 'infrastructur':24B 'known':62B 'let':41B 'manag':39B 'memori':27B 'network':50B 'out-of-bound':28B 'privileg':47B 'rais':45B 'read':32B 'report':53B 'resourc':38B 'score':56B 'server':23B,37B 'servic':40B 'sourc':52B 'unauthor':43B 'wild':66B 'window':25B,35B","search_c":"'allow':79C 'attack':82C 'bound':70C 'elev':84C 'file':74C 'manag':77C 'network':88C 'out-of-bound':67C 'privileg':85C 'read':71C 'resourc':76C 'server':75C 'servic':78C 'unauthor':81C 'window':73C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:18:13+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-108421","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108421","severity":null,"published_at":"2026-11-10T19:18:13+00:00","modified_at":"2026-11-10T19:18:13+00:00","first_seen_at":"2026-11-10T19:24:23+00:00","fetched_at":"2026-11-10T19:24:23+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}