CyberICT

CVE-2026-33826

Microsoft · Published April 14, 2026

CVSS v3.1

HIGH
Patch availableGet patch

Description

Windows Active Directory Remote Code Execution Vulnerability. Improper input validation in Windows Active Directory allows an authorized attacker to execute code over an adjacent network.

Affected Products

  • Windows Server 2019
  • Windows Server 2019 (Server Core installation)
  • Windows Server 2022
  • Windows Server 2022 (Server Core installation)

CVSS Vector

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C