Vulnerability intelligence
CVE-2026-41089
Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network.
CVSS Score
9.8
Critical
EPSS — Exploit Probability
72%
Riskier than 99% of all CVEs
Exploitation
Not in CISA KEV
No federal exploitation record
Remediation
Patch available
Vendor fix published
9 articles across 9 outlets · first covered May 12, 2026 · latest Jun 1, 2026
Coverage timeline
-
Belgium flags active exploitation of CVE-2026-41089 Netlogon flawwww.securityweek.com · Jun 1, 2026
-
Netlogon RCE bug CVE-2026-41089 exposes domain controllerssecurityonline.info · Jun 1, 2026
-
Microsoft Patch Tuesday for May 2026 fix 138 bugs, some of them are alarmingsecurityaffairs.com · May 13, 2026
-
May 2026 Patch Tuesday: 137 Vulnerabilities, No Zero-Dayssocradar.io · May 13, 2026
-
Microsoft patches 120 bugs, flags critical Netlogon and DNS RCEswww.infosecurity-magazine.com · May 13, 2026
-
Microsoft Patch Tuesday patches Netlogon and DNS RCE flawswww.rapid7.com · May 13, 2026
-
Patch Tuesday, May 2026 Editionkrebsonsecurity.com · May 12, 2026
-
Microsoft Patch May 2026 fixes 137 bugs, zero day freewww.darkreading.com · May 12, 2026
-
Microsoft May 2026 Patch Tuesday, (Tue, May 12th)isc.sans.edu · May 12, 2026