Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
A newly identified vulnerability in the Microsoft Windows DNS Client, tracked as CVE-2026-41096, poses a significant risk of remote code execution without user interaction. This critical flaw has a CVSS score of 9.8, indicating its severity. Attackers can exploit this vulnerability by sending malici...
A critical vulnerability, CVE-2026-41089, was identified in Windows Netlogon, allowing unauthenticated attackers to exploit a stack buffer overflow. This vulnerability enables attackers to execute arbitrary code at the NT AUTHORITY\SYSTEM level, posing a severe risk to Active Directory environments....
BeyondTrust has issued a warning regarding a critical remote code execution (RCE) vulnerability in its Remote Support and Privileged Remote Access software. The flaw, tracked as CVE-2026-1731, allows unauthenticated attackers to execute arbitrary code remotely and affects versions 25.3.1 or earlier...