CVE-2026-41089
CriticalCVSS 9.8Exploitation Probability (EPSS)
Very high risk100th percentile - higher than 100% of all known CVEs
Summary
Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network.
Risk Assessment
An attacker can remotely take control of the system, posing a serious security threat to the organization.
Recommendation
It is recommended to update Windows to the latest version to patch this vulnerability.
Other vulnerabilities in Windows Netlogon
See all- CVE-2026-72982Critical
Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code remotely over a network.
- CVE-2026-70090Medium
Use of uninitialized resource in Windows Netlogon allows an authorized attacker to disclose information locally.
- CVE-2026-70072Medium
Allocation of resources without limits or throttling in Windows Netlogon allows an authorized attacker to deny service over a network.
- CVE-2026-70025Medium
Use after free in Windows Netlogon allows an authorized attacker to deny service over a network.
- CVE-2026-62759High
Authentication bypass by spoofing in Windows Netlogon allows an unauthorized attacker to perform spoofing over an adjacent network.
- CVE-2026-50500High
A Use-After-Free vulnerability in Windows Netlogon allows an authorized attacker to remotely elevate privileges over a network. The issue stems from improper memory management during authentication request processing.
Original NVD description (English source)
Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

