Vulnerabilities

CVSS

8.8 High

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Risk score

70.4

Published

2026-08-11

Status

Published

Improper neutralization of special elements used in a command ('command injection') in Windows Active Directory allows an unauthorized attacker to execute code over a network.

Weaknesses

CWE-77

Coverage 1

threat-intel

Multiples vulnérabilités dans Microsoft Windows (12 août 2026)

Multiple vulnerabilities have been discovered in Microsoft Windows, including remote code execution, privilege escalation, and denial-of-service attacks. Microsoft indicates that vulnerability CVE-2026-42976 is actively…

CERT-FR · Aug 12, 2026 High

CVE-2026-68820CVE-2026-42976CVE-2026-49179vulnerabilityremote code executionprivilege escalation

All articles mentioning it

Advisories and references

• msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49179