Skip to main content
IMMUNITYSEC

CVE-2026-41089

Windows Netlogon Remote Code Execution Vulnerability

9.8
CRITICAL
CVSS 3.1
EPSS 79.6% · 100th pctCWE-121
2026-05-12Updated 2026-08-10

Description

Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network.

Severity

CVSS 3.1 · CNA9.8 CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
SSVC · CISA-ADP
Exploitationnone
Automatableyes
Technical impacttotal

Key Findings

as of 2026-11-01
All KEV statistics→
  • Its current EPSS score (79.6%) is higher than that of 63% of CISA KEV entries.

Affected Products

ProductAffected versions
Microsoft
Windows Server 2012
6.2.9200.0 to <6.2.9200.26079
Microsoft
Windows Server 2012 (Server Core installation)
6.2.9200.0 to <6.2.9200.26079
Microsoft
Windows Server 2012 R2
6.3.9600.0 to <6.3.9600.23181
Microsoft
Windows Server 2012 R2 (Server Core installation)
6.3.9600.0 to <6.3.9600.23181
Microsoft
Windows Server 2016
10.0.14393.0 to <10.0.14393.9140
Microsoft
Windows Server 2016 (Server Core installation)
10.0.14393.0 to <10.0.14393.9140
Microsoft
Windows Server 2019
10.0.17763.0 to <10.0.17763.8755
Microsoft
Windows Server 2019 (Server Core installation)
10.0.17763.0 to <10.0.17763.8755
Microsoft
Windows Server 2022
10.0.20348.0 to <10.0.20348.5139
Microsoft
Windows Server 2022, 23H2 Edition (Server Core installation)
10.0.25398.0 to <10.0.25398.2330
Microsoft
Windows Server 2025
10.0.26100.0 to <10.0.26100.32860
Microsoft
Windows Server 2025 (Server Core installation)
10.0.26100.0 to <10.0.26100.32860

References

1 links

Record Details

Published
2026-05-12
Last updated
2026-08-10
Assigner (CNA)
microsoft
Credited to
-

More from Microsoft

All Microsoft CVEs→
CVE-2015-16359.8 CRITICAL

Microsoft HTTP.sys Remote Code Execution Vulnerability

KEVEPSS 100.0%2015-04-14
CVE-2019-07089.8 CRITICAL

Microsoft Remote Desktop Services Remote Code Execution Vulnerability

MicrosoftKEVEPSS 100.0%2019-05-16
CVE-2025-537709.8 CRITICAL

Microsoft SharePoint Server Remote Code Execution Vulnerability

MicrosoftKEVEPSS 100.0%2025-07-20
CVE-2021-344739.1 CRITICAL

Microsoft Exchange Server Remote Code Execution Vulnerability

MicrosoftKEVEPSS 100.0%2021-07-14

CVE record data © The MITRE Corporation, used under the CVE Terms of Use. Exploited-in-the-wild data from the CISA Known Exploited Vulnerabilities catalog (CC0). Exploit prediction scores by FIRST EPSS (first.org/epss). Alert titles and links from CISA cybersecurity alerts. This site is not affiliated with or endorsed by MITRE, NVD, CISA, or FIRST.