Heap-based buffer overflow in Windows File Server allows an authorized attacker to elevate privileges locally.

The remote Windows host is missing security update 5078740 or hotpatch 5078736. It is, therefore, affected by multiple vulnerabilities

  - Use after free in Windows Print Spooler Components allows an authorized attacker to execute code over a     network. (CVE-2026-23669)

  - Heap-based buffer overflow in Windows File Server allows an authorized attacker to elevate privileges     locally. (CVE-2026-24283)

  - Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
    (CVE-2026-24285)

  - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands.
    (CVE-2026-26111)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5079466. It is, therefore, affected by multiple vulnerabilities

  - Use after free in Broadcast DVR allows an authorized attacker to elevate privileges locally.
    (CVE-2026-23667)

  - Use after free in Windows Print Spooler Components allows an authorized attacker to execute code over a     network. (CVE-2026-23669)

  - Heap-based buffer overflow in Windows File Server allows an authorized attacker to elevate privileges     locally. (CVE-2026-24283)     
  - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges.
    (CVE-2026-25177, CVE-2026-25188)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5079473 or hotpatch 5079420. It is, therefore, affected by multiple vulnerabilities

  - Use after free in Broadcast DVR allows an authorized attacker to elevate privileges locally.
    (CVE-2026-23667)

  - Use after free in Windows Print Spooler Components allows an authorized attacker to execute code over a     network. (CVE-2026-23669)

  - Heap-based buffer overflow in Windows File Server allows an authorized attacker to elevate privileges     locally. (CVE-2026-24283)   
  - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges.
    (CVE-2026-25177, CVE-2026-25188)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5078734. It is, therefore, affected by multiple vulnerabilities

  - Use after free in Windows Print Spooler Components allows an authorized attacker to execute code over a     network. (CVE-2026-23669)

  - Heap-based buffer overflow in Windows File Server allows an authorized attacker to elevate privileges     locally. (CVE-2026-24283)

  - Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
    (CVE-2026-24285)   
  - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands.
    (CVE-2026-26111)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
301780	KB5078740: Windows Server 2025 Security Update (March 2026)	Nessus	Windows : Microsoft Bulletins	high
301773	KB5079466: Windows 11 Version 26H1 Security Update (March 2026)	Nessus	Windows : Microsoft Bulletins	high
301768	KB5079473: Windows 11 Version 24H2 / Windows 11 Version 25H2 Security Update (March 2026)	Nessus	Windows : Microsoft Bulletins	high
301767	KB5078734: Windows Server version 23H2 Security Update (March 2026)	Nessus	Windows : Microsoft Bulletins	high

Detections

Analytics

CVE-2026-24283

high

Tenable Plugins

high

high

high

high