domain controllers

CVE-2026-54119 is a remotely triggerable Windows Active Directory denial-of-service vulnerability that requires no authentication or user interaction, giving administrators a clear reason to prioritize Microsoft’s July 14, 2026 security updates on domain controllers and other systems exposing...

Microsoft has patched CVE-2026-49164, a Critical remote code execution vulnerability in Windows Active Directory Domain Services, as part of the July 14, 2026 security updates. Because Active Directory domain controllers sit at the center of authentication, authorization, Group Policy, and...