8.0 HighCWE-20
CVE-2026-33826
Microsoft Windows Server 2012 R2 vulnerability
MicrosoftWindows Server 2012 R2
Status
- Not in CISA KEV
- Vendor fix available
Exploit probabilityEPSSchecked 25 Oct
0.5%probability of exploitation in the next 30 days
Higher than 45% of scored CVEs
SeverityCVSS
8.0High
Description NVD
Improper input validation in Windows Active Directory allows an authorized attacker to execute code over an adjacent network.
Coverage 1 article · 1 outlet
- Microsoft Patch Tuesday April 2026., (Tue, Apr 14th)SANS ISC · first in our coverage · mentions it in passing