PT-2026-58512 · Microsoft · Active Directory+2

CVE-2026-54115 · Published 2026-07-14 · Updated 2026-07-15

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Windows Active Directory (affected versions not specified) Windows MSMQ (affected versions not specified)

Description An integer overflow or wraparound in Windows Active Directory allows an authorized attacker to elevate privileges locally. Additionally, a privilege escalation issue exists within the Microsoft Message Queuing (MSMQ) service.

Recommendations Apply the July security updates for Windows MSMQ. At the moment, there is no information about a newer version that contains a fix for this vulnerability in Windows Active Directory.

Fix

LPE

DoS

Integer Overflow

Heap Based Buffer Overflow

Weakness Enumeration

CWE-190

CWE-122

Related Identifiers

BDU:2026-09813

CVE-2026-54115

Affected Products

Active Directory

Msmq

Windows

References · 6

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54115 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-54115 · Security Note
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54115 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-54115 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-09813 · Security Note
• https://twitter.com/windowsforum/status/2077392534167298359 · Twitter Post