Vulnerability intelligence
CVE-2026-33826
Improper input validation in Windows Active Directory allows an authorized attacker to execute code over an adjacent network.
CVSS Score
8
High
EPSS — Exploit Probability
0.5%
Riskier than 41% of all CVEs
Exploitation
Not in CISA KEV
No federal exploitation record
Remediation
Patch available
Vendor fix published
1 article across 1 outlet · first covered Apr 14, 2026 · latest Apr 14, 2026
Tracked incidents
Coverage timeline
-
Microsoft Patch Tuesday April 2026., (Tue, Apr 14th)isc.sans.edu · Apr 14, 2026