Stack-based Buffer Overflow in Windows Active Directory by Microsoft
CVE-2026-119948
Key Information:
- Vendor
Microsoft
- Vendor
- CVE Published:
- 10 November 2026
Badges
What is CVE-2026-119948?
A stack-based buffer overflow vulnerability in Windows Active Directory can be exploited by an authorized attacker to execute arbitrary code remotely over the network. This security flaw poses risks to system integrity and can lead to significant data breaches if not promptly addressed. It is crucial for organizations using Windows Active Directory to apply the necessary patches and monitor their systems for any signs of exploitation.
Affected Version(s)
Windows 10 Version 1607 32-bit Systems 10.0.14393.0 < 10.0.14393.9688
Windows 10 Version 1809 32-bit Systems 10.0.17763.0 < 10.0.17763.9487
Windows 10 Version 21H2 32-bit Systems 10.0.19044.0 < 10.0.19044.7846
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.