Executive brief
A vulnerability in the Windows Domain Controller component could allow an unauthorized attacker to crash the system remotely. The Domain Controller is a critical piece of infrastructure that manages security and user logins for a corporate network. If exploited, this could lead to a total service outage, preventing users from logging in or accessing network resources.
Technical details
This vulnerability is classified as an untrusted pointer dereference (CWE-822) within the Windows Domain Controller component. An unauthenticated attacker can exploit this flaw over the network without any user interaction. By sending specially crafted data that the system fails to properly validate before dereferencing a pointer, the attacker can trigger a system crash or service failure (Denial of Service). The vulnerability affects several modern versions of Windows 11 and Windows Server 2025. Microsoft has released security updates to address this issue.
Affected products
- Microsoft Windows 11 Version 24H2 10.0.26100.0 to 10.0.26100.8875
- Microsoft Windows 11 Version 25H2 10.0.26200.0 to 10.0.26200.8875
- Microsoft Windows 11 version 26H1 10.0.28000.0 to 10.0.28000.2269
- Microsoft Windows Server 2025 10.0.26100.0 to 10.0.26100.33158
Timeline
- 2026-07-14: disclosed
- 2026-07-14: advisory