VulnSocial

CVE-2026-49164General(microsoft / windows_10_1607)

LOWCVSS 9.8 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Heap-based buffer overflow in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.

microsoft CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Patch / fix
Weakness type (CWE)
CWE-122

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • windows_10_1607
  • windows_10_1809
  • windows_10_21h2
  • windows_10_22h2

Threat summary

  • 3 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 2 signals
  • General: 3 classified signals
  • Peaked 2d ago at 1 mentions (2026-07-14); latest day: 1
  • 3 total mentions across 3 days

Affected systems

Vendors
microsoft
Products
windows_10_1607windows_10_1809windows_10_21h2windows_10_22h2windows_11_24h2windows_11_25h2windows_11_26h1windows_server_2012windows_server_2016windows_server_2019

2 versions affected across 12 products

Deep dive

Activity timeline3 mentions / 3d
00111Mentions · 2026-07-14: 1Mentions · 2026-07-15: 1Mentions · 2026-09-07: 1Technical Details · 2026-07-15: 1Technical Details · 2026-09-07: 107-1407-1509-07
Signal classification1 categories
General
3100.0%
Referenced assets3 URLs
Full discourse3 posts
  • hi^^@collysucker
    General

    Does somebody happen to have technical details regarding ActiveDirectory Domain Services RCE CVE-2026-49164 Heap-Based Buffer Overflow? #infosec #microsoft https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49164

    Post summary

    The post requests additional technical details on CVE-2026-49164, referencing it as a Heap-Based Buffer Overflow that enables RCE in Active Directory Domain Services, but it provides no new information, PoC, or evidence of exploitation.

    00012101
    217 followersView on X
  • IntegSec@integ_sec
    General

    CVE-2026-49164: Active Directory Domain Services Heap Buffer Overflow - What It Means for Your Business and How to Respond https://hubs.li/Q04wSTnc0

    Post summary

    Only the CVE identifier and a high‑level description of a heap buffer overflow are presented, without any evidence of exploitation, patching information, or detailed technical data.

    0000032
    35 followersView on X
  • VulDB 🛡@vuldb
    General

    The severity is increased for this new vulnerability affecting Microsoft Windows (CVE-2026-49164) https://vuldb.com/vuln/378419

    Post summary

    The brief mention identifies a CVE and links to a vulnerability database, but provides no technical details, PoC, exploit, or patch information.

    00000104
    2.3K followersView on X
CPE platform detail22 entries

22 of 22 entries

PartVendorProductVersionTarget SWTarget HW
OSmicrosoftwindows_10_1607--x64
OSmicrosoftwindows_10_1607--x86
OSmicrosoftwindows_10_1809--x64
OSmicrosoftwindows_10_1809--x86
OSmicrosoftwindows_10_21h2--arm64
OSmicrosoftwindows_10_21h2--x64
OSmicrosoftwindows_10_21h2--x86
OSmicrosoftwindows_10_22h2--arm64
OSmicrosoftwindows_10_22h2--x64
OSmicrosoftwindows_10_22h2--x86
OSmicrosoftwindows_11_24h2--arm64
OSmicrosoftwindows_11_24h2--x64
OSmicrosoftwindows_11_25h2--arm64
OSmicrosoftwindows_11_25h2--x64
OSmicrosoftwindows_11_26h1--arm64
OSmicrosoftwindows_11_26h1--x64
OSmicrosoftwindows_server_2012---
OSmicrosoftwindows_server_2012r2--
OSmicrosoftwindows_server_2016---
OSmicrosoftwindows_server_2019---
OSmicrosoftwindows_server_2022---
OSmicrosoftwindows_server_2025---

Explore more

Back to dashboardmicrosoft CVEswindows_10_1607 vulnerabilities