Critical · 9.8 Exploitation more likely CVE-2021-26432 EUVD-2021-13237GHSA-7367-6rvj-7jxm

Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability

Published Aug 12, 2021 · Updated Aug 10, 2026 · Assigned by microsoft

Vendor: Microsoft Product: Windows 10 Version 1507 Product: Windows 10 Version 1607 Product: Windows 10 Version 1809 Product: Windows 10 Version 1909 Product: Windows 10 Version 2004 Product: Windows 10 Version 20H2 Product: Windows 10 Version 21H1 Product: Windows 8.1 Product: Windows Server 2012 Product: Windows Server 2012 (Server Core installation) Product: Windows Server 2012 R2 Product: Windows Server 2012 R2 (Server Core installation) Product: Windows Server 2016 Product: Windows Server 2016 (Server Core installation) Product: Windows Server 2019 Product: Windows Server 2019 (Server Core installation) Product: Windows Server version 2004 Product: Windows Server version 20H2 Platform: Windows

Description

Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability

Affected products

Vendor	Product	Affected	Fixed
Microsoft	Windows 10 Version 1507	10.0.10240.0 – < 10.0.10240.19022	10.0.10240.19022
Microsoft	Windows 10 Version 1607	10.0.14393.0 – < 10.0.14393.4583	10.0.14393.4583
Microsoft	Windows 10 Version 1809	10.0.17763.0 – < 10.0.17763.2114, 10.0.0 – < 10.0.17763.2114	10.0.17763.2114
Microsoft	Windows 10 Version 1909	10.0.0 – < 10.0.18363.1734	10.0.18363.1734
Microsoft	Windows 10 Version 2004	10.0.0 – < 10.0.19041.1165	10.0.19041.1165
Microsoft	Windows 10 Version 20H2	10.0.0 – < 10.0.19042.1165	10.0.19042.1165
Microsoft	Windows 10 Version 21H1	10.0.0 – < 10.0.19043.1165	10.0.19043.1165
Microsoft	Windows 8.1	6.3.0 – < 6.3.9600.20094	6.3.9600.20094
Microsoft	Windows Server 2012	6.2.9200.0 – < 6.2.9200.23435	6.2.9200.23435
Microsoft	Windows Server 2012 (Server Core installation)	6.2.9200.0 – < 6.2.9200.23435	6.2.9200.23435
Microsoft	Windows Server 2012 R2	6.3.9600.0 – < 6.3.9600.20094	6.3.9600.20094
Microsoft	Windows Server 2012 R2 (Server Core installation)	6.3.9600.0 – < 6.3.9600.20094	6.3.9600.20094
Microsoft	Windows Server 2016	10.0.14393.0 – < 10.0.14393.4583	10.0.14393.4583
Microsoft	Windows Server 2016 (Server Core installation)	10.0.14393.0 – < 10.0.14393.4583	10.0.14393.4583
Microsoft	Windows Server 2019	10.0.17763.0 – < 10.0.17763.2114	10.0.17763.2114
Microsoft	Windows Server 2019 (Server Core installation)	10.0.17763.0 – < 10.0.17763.2114	10.0.17763.2114
Microsoft	Windows Server version 2004	10.0.0 – < 10.0.19041.1165	10.0.19041.1165
Microsoft	Windows Server version 20H2	10.0.0 – < 10.0.19042.1165	10.0.19042.1165

Advisories 1

MSRC-CVE-2021-26432 Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability Microsoft Security Response Center · Aug 12, 2021

References

Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability vendor-advisory patch