Microsoft discloses Active Directory remote code execution and denial-of-service flaws
Both Important-rated flaws need low privileges; the record does not show an active exploitation campaign.
62
Product
Windows Active Directory
- Mentions · 7d2
- Mentions · 30d2
- All mentions2
- First seenNov 11, 2026
- Last mentioned8h ago
Timeline
2 articles · newest firstMicrosoft patches Active Directory network RCE rated Important
CVE-2026-119948 is a CVSS 7.5 stack overflow needing low privileges; Microsoft reports no known exploitation.
62
Related CVEs
by mentions- Stack buffer overflow in Windows Active Directory
- Denial of service in Windows Active Directory (authenticated)
Appears with
- Windows Serverproduct · 2
- Windows 11product · 2
- Windows 10product · 2
- Microsoftvendor · 2
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.