cve 2026 56194

The cve 2026 56194 tag covers Microsoft’s July 14, 2026 security update for a high-severity elevation-of-privilege vulnerability in Windows NFS Server. The flaw is described as a heap-based buffer overflow that could allow an authorized attacker to elevate privileges over a network. It carries a CVSS 3.1 score of 8.8 and affects a broad range of Windows client and server releases, including Windows Server 2012 through Windows Server 2025, Windows 10, and current Windows 11 branches. This archive provides coverage of the vulnerability, Microsoft’s advisory, affected platforms, and the need to apply the relevant monthly security updates.