HIGH 8.8 Microsoft

CVE-2026-45648

Windows Active Directory Domain Services Remote Code Execution Vulnerability

Microsoft Security Update 2026-Jun: Windows Active Directory Domain Services Remote Code Execution Vulnerability

Affected Products

Windows Server 2022
Windows Server 2022 (Server Core installation)
Windows Server 2025 (Server Core installation)
Windows Server 2025

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45648
https://nvd.nist.gov/vuln/detail/CVE-2026-45648

Published: 2026-06-09 · Source: Microsoft · Feed updated: 2026-08-04

This high severity vulnerability with a CVSS score of 8.8 was published on 2026-06-09 via Microsoft. Affected: Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025 (Server Core installation) and 1 more.

vulnfeed aggregates 9166 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.