9.8 CriticalCWE-121
CVE-2026-41089
Microsoft Windows Server 2012 vulnerability
MicrosoftWindows Server 2012
Status
- Not in CISA KEV
- Vendor fix available
Exploit probabilityEPSSchecked 25 Oct
80%probability of exploitation in the next 30 days
Higher than 100% of scored CVEs
SeverityCVSS
9.8Critical
Description NVD
Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network.
Coverage 9 articles · 9 outlets
See the full timelineShow as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Tue 12 May · 19:20 UTC | SANS ISC | Microsoft May 2026 Patch Tuesday, (Tue, May 12th) |
| Tue 12 May · 21:31 UTC | Dark Reading | Microsoft Patch May 2026 fixes 137 bugs, zero day free |
| Tue 12 May · 22:10 UTC | Krebs on Security | Patch Tuesday, May 2026 Edition |
| Wed 13 May · 02:31 UTC | Rapid7 | Microsoft Patch Tuesday patches Netlogon and DNS RCE flaws |
| Wed 13 May · 08:31 UTC | Infosecurity | Microsoft patches 120 bugs, flags critical Netlogon and DNS RCEs |
| Wed 13 May · 12:11 UTC | SOCRadar | May 2026 Patch Tuesday: 137 Vulnerabilities, No Zero-Days |
| Wed 13 May · 20:32 UTC | Security Affairs | Microsoft Patch Tuesday for May 2026 fix 138 bugs, some of them are alarming |
| Mon 1 Jun · 02:47 UTC | SecurityOnline | Netlogon RCE bug CVE-2026-41089 exposes domain controllers |
| Mon 1 Jun · 15:21 UTC | SecurityWeek | Belgium flags active exploitation of CVE-2026-41089 Netlogon flaw |
- Belgium flags active exploitation of CVE-2026-41089 Netlogon flawSecurityWeek
- Netlogon RCE bug CVE-2026-41089 exposes domain controllersSecurityOnline
- Microsoft Patch Tuesday for May 2026 fix 138 bugs, some of them are alarmingSecurity Affairs
- May 2026 Patch Tuesday: 137 Vulnerabilities, No Zero-DaysSOCRadar · mentions it in passing
- Microsoft patches 120 bugs, flags critical Netlogon and DNS RCEsInfosecurity
- Microsoft Patch Tuesday patches Netlogon and DNS RCE flawsRapid7
- Patch Tuesday, May 2026 EditionKrebs on Security
- Microsoft Patch May 2026 fixes 137 bugs, zero day freeDark Reading · mentions it in passing
- Microsoft May 2026 Patch Tuesday, (Tue, May 12th)SANS ISC · first in our coverage · mentions it in passing