PT-2026-32885 · Microsoft · Active Directory+1

Aniq Fakhrul · Published 2026-04-14 · Updated 2026-05-10 · CVE-2026-33826

Positive Technologies (AI Summary)

CVSS v3.1

8.0

High

Base vector

AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Windows Active Directory versions prior to April 2026 Patch Tuesday

Description Improper input validation in Windows Active Directory allows an authorized attacker to execute arbitrary code over an adjacent network. This issue enables authenticated attackers to run malicious code via specially crafted RPC (Remote Procedure Call) calls, which is a protocol that allows a program to request a service from a program located on another computer on a network.

Recommendations Update to the version provided in the April 2026 Patch Tuesday. Lock down Domain Controller RPC reachability. Implement network segmentation. Monitor RPC traffic.

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2026-05683

CVE-2026-33826

Affected Products

Active Directory

Windows

References · 19

• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-33826 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33826 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-33826 · Security Note
• https://bdu.fstec.ru/vul/2026-05683 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33826 · Security Note
• https://reddit.com/r/crowdstrike/comments/1t9dzs4/crowdstrike_falcon_last_patch_tuesday_cve · Reddit Post
• https://twitter.com/AlexeiBelous/status/2045103804522099036 · Twitter Post
• https://twitter.com/AlexeiBelous/status/2044735167298744388 · Twitter Post
• https://twitter.com/CVEnew/status/2044358631584411993 · Twitter Post
• https://twitter.com/AlexeiBelous/status/2046978332777148830 · Twitter Post
• https://twitter.com/AlbanBeluli/status/2044816463710564606 · Twitter Post
• https://twitter.com/vuldb/status/2044492854630969639 · Twitter Post
• https://twitter.com/CyberTech_In/status/2045036507891937707 · Twitter Post
• https://twitter.com/CinchOpsIT/status/2046680372360945686 · Twitter Post
• https://twitter.com/Mahendrak29/status/2044244775340257720 · Twitter Post