---
id: "CVE-2026-122165"
page: "https://infrastack.ai/live/CVE-2026-122165"
kind: "vulnerability"
aliases: ["CVE-2026-122165"]
title: "Windows Client for NFS: heap overflow lets a local user gain higher privileges"
severity: "high"
cvss: 7.8
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["infrastructure", "local-privilege-escalation", "nfs", "windows"]
not_affected_if: ["nfs-client-not-installed", "no-local-untrusted-users"]
published_at: "2026-11-10T19:20:33+00:00"
first_seen_at: "2026-11-10T19:25:10+00:00"
updated_at: "2026-11-10T19:38:59+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-122165", "first_seen_at": "2026-11-10T19:25:10+00:00"}]
exploit_sources: []
---

# Windows Client for NFS: heap overflow lets a local user gain higher privileges

Link for people: https://infrastack.ai/live/CVE-2026-122165 (this .md is for agents)

A heap-based buffer overflow in the Windows Client for NFS lets an attacker who already has an account on the machine raise their privileges. The sources do not describe the exact trigger or the affected Windows builds.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check whether the Windows Client for NFS feature is installed and enabled (Settings > Optional features or Turn Windows features on or off, 'Services for NFS').
- Compare the installed Windows build against Microsoft's security update guide entry for this CVE: unknown from the sources.

## Timeline

- 2026-11-10T19:25:10+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-122165

## From the sources

Heap-based buffer overflow in Windows Client for NFS allows an authorized attacker to elevate privileges locally.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_