CVE-2026-119948

CVE-2026-119948 is a stack-based buffer overflow vulnerability affecting Windows Active Directory. Disclosed in November 2026, the flaw impacts a wide range of operating systems, including multiple versions of Windows 10, Windows 11, and Windows Server (from 2016 to 2025). The vulnerability allows an authorized attacker with low privileges to execute arbitrary code over a network without requiring any user interaction. Exploiting the vulnerability involves high attack complexity, indicating that specific environmental conditions, such as particular protocol settings or configurations, must be present. Microsoft has not publicly disclosed the specific vulnerable function, the exact network request needed, or a working proof-of-concept attack method. To address the flaw, administrators are advised to deploy the official security updates provided by Microsoft across all affected systems.