‹ Back to list

Microsoft

Microsoft Windows Active Directory: vulnerabilities and CVEs

Microsoft Windows Active Directory has 2 published vulnerabilities, 2 of them in the last 12 months. 0 are rated critical and 0 are listed by CISA as actively exploited.

CVEs2
Last 12 months2
Critical0
Actively exploited0

All vulnerabilities in the catalogue →⭐ Follow this technology

Latest vulnerabilities

CVESeverityEPSSActive exploitationPublishedDescription
CVE-2026-119948High (7.5)0.68%—Nov 10, 2026
Stack-based buffer overflow in Windows Active Directory allows an authorized attacker to execute code over a network.
CVE-2026-105559Medium (6.5)1.0%—Nov 10, 2026
No cwe for this issue in Windows Active Directory allows an authorized attacker to deny service over a network.

🎯 How it gets exploited (ATT&CK techniques)

  1. T1210 Exploitation of Remote Services2
  2. T1059 Command and Scripting Interpreter1
  3. T1499 Endpoint Denial of Service1

Number of CVEs of this technology mapped to each exploitation or primary-impact technique.

📰 Related news

Other products by Microsoft