Windows Active Directory Vulnerability Allow Attackers to Execute Malicious Code

Microsoft disclosed a critical Windows Active Directory vulnerability (CVE-2026-33826, CVSS 8.0) that allows remote code execution via a specially crafted RPC due to improper input validation; exploitation is adjacent-network limited and requires presence inside the target AD domain. Microsoft reports no evidence of active exploitation, credits the researcher, and has released cumulative updates (listed by KB) for supported Windows Server versions — administrators are urged to apply the fixes immediately.