CyberICT

CVE-2026-70229

Microsoft · Published October 13, 2026

CVSS v3.1

HIGH
Patch availableGet patch

Description

Windows Active Directory Domain Services Remote Code Execution Vulnerability. Incorrect authorization in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.

Affected Products

  • Windows 11 Version 26H2 for ARM64-based Systems
  • Windows 11 Version 26H2 for x64-based Systems
  • Windows Server 2012 (Server Core installation)
  • Windows Server 2012 R2

CVSS Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C