CVE-2026-71330

Analyzed Analyzed - Analysis Complete

Exposure of Sensitive Information in Windows Services for NFS ONCRPC XDR Driver

Publication date: 2026-09-08

Last updated on: 2026-09-24

Assigner: Microsoft Corporation

Description

Exposure of sensitive system information to an unauthorized control sphere in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to disclose information over a network.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-08

Last Modified

2026-09-24

Generated

2026-09-29

AI Q&A

2026-09-10

EPSS Evaluated

2026-09-27

NVD

CVE-2026-71330

Affected Vendors & Products

Vendor	Product	Version / Range
microsoft	windows_services_for_nfs_oncrpc_xdr_driver	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-497	The product does not properly prevent sensitive system-level information from being accessed by unauthorized actors who do not have the same level of access to the underlying system as the product does.

Attack-Flow Graph

Executive Summary

This vulnerability involves the Exposure of sensitive system information to an unauthorized control sphere in Windows Services for NFS ONCRPC XDR Driver. An unauthorized attacker can exploit this to disclose information over a network.

Impact Analysis

An attacker could gain access to sensitive system information, potentially leading to further attacks or data breaches. This could compromise confidentiality of data processed by the affected driver.

Compliance Impact

This vulnerability could lead to unauthorized disclosure of sensitive data, which may violate compliance requirements such as GDPR or HIPAA. Organizations must address it to maintain data protection standards.

Mitigation Strategies

Apply the latest security updates from Microsoft to patch the Windows Services for NFS ONCRPC XDR Driver. Disable unnecessary network services if not required. Monitor network traffic for unusual activity related to information disclosure.

Hi! I’m here to help you understand CVE-2026-71330. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70