CVE-2026-88165
HighCVSS 8.8Summary
Out-of-bounds write in Active Directory Domain Services allows an authorized attacker to execute code over a network.
Risk Assessment
An attacker could exploit this vulnerability to execute code on a domain controller, potentially leading to full domain compromise.
Recommendation
Install security updates for Active Directory Domain Services.
Other vulnerabilities in Active Directory Domain Services
See all- CVE-2026-83647High
Out-of-bounds read in Active Directory Domain Services allows an unauthorized attacker to deny service over a network.
- CVE-2026-70229High
Incorrect authorization in Active Directory Domain Services. An unauthorized attacker can execute code over a network.
- CVE-2022-26923HighActively exploited
A privilege elevation vulnerability in Active Directory Domain Services (AD DS). An attacker can gain domain administrator privileges.
- CVE-2021-42287HighActively exploited
Active Directory Domain Services Elevation of Privilege Vulnerability. Technical details are not provided in the description.
- CVE-2021-42278HighActively exploited
Active Directory Domain Services Elevation of Privilege Vulnerability. Technical details are not provided in the description.
- CVE-2026-69809High
Missing release of memory after effective lifetime in Active Directory Domain Services allows an unauthorized attacker to deny service over a network.
- CVE-2026-69546High
Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.
- CVE-2026-69524High
Use-after-free vulnerability in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.
- CVE-2026-69359High
Heap-based buffer overflow in Active Directory Domain Services allows an authorized attacker to elevate privileges locally.
- CVE-2026-62813High
Use after free in Active Directory Domain Services allows an authorized attacker to execute code over a network.
Original NVD description (English source)
Out-of-bounds write in Active Directory Domain Services allows an authorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS