Windows Active Directory Vulnerability Allows Attackers to Execute Malicious Code

Microsoft disclosed CVE-2026-33826, a critical Active Directory vulnerability (CVSS 8.0) that allows authenticated attackers within the same domain/adjacent network to execute code at the RPC host’s privilege level. Affected systems include Windows Server 2012 R2 through 2025; Microsoft has released patches (e.g., KB5082063, KB5082142). Organizations are advised to apply updates immediately, monitor RPC/adjacent-network activity, audit domain access logs, and enforce segmentation and least-privilege controls.