Microsoft patches Active Directory network RCE rated Important
Original title: Windows Active Directory RCE Vulnerability Allows Attacker to Execute Code Over a Network
CVE-2026-119948 is a CVSS 7.5 stack overflow needing low privileges; Microsoft reports no known exploitation.
Microsoft released November 10, 2026 updates for CVE-2026-119948, an Important Windows Active Directory flaw scored CVSS 3.1 7.5. An authorized attacker can execute code over a network when specific configurations exist; complexity is high and no user interaction is required. Microsoft says there is no known exploitation and unproven exploit code. It also disclosed CVE-2026-105559, an Important Active Directory denial-of-service issue scored 6.5.
Unconfirmed: Microsoft has not disclosed the affected function, required request, or a working attack method.
- The weakness is identified as a stack-based buffer overflow.
- Server 2022 patched build is 10.0.20348.5870 via KB5131090.
- Windows 11 23H2 patched build is 10.0.22631.7711 via KB5131087.
- The advisory does not say exploitation grants SYSTEM or domain control.
- An anonymous researcher is credited; exploit maturity is unproven.
Impact: Remote code execution affecting confidentiality, integrity, and availability
| Product | Affected | Fixed in |
|---|---|---|
| Microsoft Windows Server 2025 | Standard and Server Core installations | 10.0.26100.33822 / 10.0.26100.33730 |
| Microsoft Windows Server 2022 | Standard and Server Core installations | 10.0.20348.5870 |
| Microsoft Windows Server 2019 | Standard and Server Core installations | 10.0.17763.9487 |
| Microsoft Windows Server 2016 | Standard and Server Core installations | 10.0.14393.9688 |
| Microsoft Windows 11 | 23H2 through 26H2 | version-specific builds including 10.0.22631.7711 and 10.0.26300.9974 |
| Microsoft Windows 10 | 1607, 1809, 21H2, and 22H2 | version-specific builds including 10.0.19045.7846 and 10.0.14393.9688 |
- 1.Install the applicable Microsoft update for each affected Windows release.
- 2.Verify the patched build listed for that version rather than using one package everywhere.
- 3.Review the separate Active Directory denial-of-service advisory for CVE-2026-105559.
- Vendors
- Microsoft
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2026-119948+1 related CVE | Stack buffer overflow in Windows Active Directory | 7.5 group max | — |
From the original article
3 min read at cybersecuritynews.com
Microsoft has released security updates for a Windows Active Directory vulnerability that allows an authorized attacker to execute code over a network. Tracked as CVE-2026-119948, the flaw was disclosed on November 10, 2026, and affects multiple Windows desktop and server versions. Microsoft rates it Important, with a CVSS 3.
By Abinaya · cybersecuritynews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.