A critical stack-based buffer overflow vulnerability in the Windows Netlogon service is currently being exploited in active cyberattacks. Identified as CVE-2026-41089, this flaw allows unauthenticated attackers to execute arbitrary code with SYSTEM-level priv…
Microsoft originally patched this vulnerability during the May 2026 Patch Tuesday cycle, initially categorizing exploitation as less likely. However, security agencies now warn that the gap between d…