CVE-2026-72982Patch(microsoft / windows_10_1607)

LOWCVSS 9.8 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch microsoft windows_10_1607 systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network.

microsoft CVEs Back to dashboard

1.3/ 10 priority

Sources & remediation

Patch / fix

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72982

Weakness type (CWE)

CWE-121

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

windows_10_1607
windows_10_1809
windows_10_21h2
windows_10_22h2

Threat summary

Patch or workaround signal is available
10 mentions across 8 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 7 signals
Technical details provided in 7 signals
General: 2 classified signals
Peaked 7d ago at 3 mentions (2026-09-09); latest day: 1
10 total mentions across 8 days

Affected systems

Vendors

microsoft

Products

windows_10_1607windows_10_1809windows_10_21h2windows_10_22h2windows_11_23h2windows_11_24h2windows_11_25h2windows_11_26h1windows_server_2012windows_server_2016

2 versions affected across 13 products

Deep dive

Activity timeline10 mentions / 8d

Signal classification2 categories

Patch

777.8%

General

222.2%

Referenced assets5 URLs

By indicator

Classification over time

Date	Total	Labels

2026-09-09	3	General1Patch2
2026-09-10	1	General1
2026-09-11	1	Patch1
2026-09-12	1	Patch1
2026-09-13	1	Patch1
2026-09-18	1	Patch1
2026-09-22	1	Patch1

Full discourse10 posts

Justin Elze@HackingLZ44d
General
Something to consider when ranking vulnerabilities CVE-2026-72982 has been public for a couple of days, so why aren’t attackers already using it to pop shells on DCs? Everyone has LLMs now, right? Finding a bug and producing a crash is not the same as building reliable RCE. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-72982
Post summary
The tweet discusses the public release of CVE‑2026‑72982 and questions why attackers aren't using it, without providing any technical, exploit, or mitigation details.
98271156.7K
73.9K followersView on X
Daniel B. - AI & Tech@danielbitpro45d
Patch
The latest Microsoft Patch Tuesday is chilling: - CVE-2026-72982 - Critical RCE - CVE-2026-69730 - Critical RCE - CVE-2026-69845 - Critical RCE - CVE-2026-72979 - Critical RCE And many more, 726 patches this month, 650 ESUs, 135 for Office, 974 total across products. Patch now! https://t.co/7t3q7NEH0a
Post summary
Microsoft’s latest Patch Tuesday disclosed multiple critical RCE vulnerabilities across several products and urged users to apply the patches provided via the supplied link.
10020338
177 followersView on X
Anurag Verma@anurag_62932d
Patch
CVE-2026-72982 just landed a 9.8 on every Windows domain controller you run. Stack buffer overflow in Netlogon, no auth required, no click needed. Netlogon decides who's actually who across your whole AD domain, so an unauthenticated RCE there means control over identity for the entire org, not one machine. Patched this Patch Tuesday. Update before you finish reading this tweet. @MSFTSecResponse's advisory: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72982
Post summary
The text announces a critical unauthenticated RCE vulnerability (CVE-2026-72982, CVSS 9.8) in Netlogon and explicitly directs readers to update via the Patch Tuesday advisory, making the primary information the availability of a vendor patch and remediation action.
0002082
321 followersView on X
ケイ | IT・セキュリティ系副業Webライター@Teeeda_worker42d
Patch
【重要】Windows NetlogonにCVSS 9.8、9月更新を適用 https://www.cybernote.click/2026/09/09/windows-netlogon-cve-2026-72982-rce-update/ #IT #Security #cybersecurity
Post summary
The post informs that a September patch was applied to address the Windows Netlogon CVE‑2026‑72982, a high‑severity RCE vulnerability with a CVSS score of 9.8.
0000170
204 followersView on X
ケイ | IT・セキュリティ系副業Webライター@Teeeda_worker43d
Patch
【重要】Windows NetlogonにCVSS 9.8、9月更新を適用 https://www.cybernote.click/2026/09/09/windows-netlogon-cve-2026-72982-rce-update/ #IT #Security #cybersecurity
Post summary
The tweet alerts users to a September patch for a critical Windows Netlogon RCE vulnerability (CVE-2026-72982) with a CVSS score of 9.8, urging timely update.
0001061
204 followersView on X
Justin Elze@HackingLZ45d
General
@midnight_comms @SecurePeacock For example https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-72982
Post summary
The tweet merely cites the Microsoft security advisory for CVE-2026-72982 without providing additional details or exploitation context.
1000044
73.5K followersView on X
Windows Forum@windowsforum15d
🔐 Netlogon’s critical 9.8 stack overflow lets attackers run code over the network. Domain controllers aren’t the place to play patch roulette—install Microsoft’s fix. https://windowsforum.com/news/cve-2026-72982-windows-netlogon-remote-code-execution-vulnerability.447772/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #MicrosoftSecurity #Msrc #Cve202672982 https://t.co/B71cPrvGfE
0000078
1.4K followersView on X
ケイ | IT・セキュリティ系副業Webライター@Teeeda_worker37d
Patch
【重要】Windows NetlogonにCVSS 9.8、9月更新を適用 https://www.cybernote.click/2026/09/09/windows-netlogon-cve-2026-72982-rce-update/ #IT #Security #cybersecurity
Post summary
The post warns about a high-severity Windows Netlogon CVE and urges applying the September update. It provides a CVSS score and RCE context but does not mention PoC, exploit tooling, or active exploitation.
0000066
207 followersView on X
ケイ | IT・セキュリティ系副業Webライター@Teeeda_worker41d
Patch
【重要】Windows NetlogonにCVSS 9.8、9月更新を適用 https://www.cybernote.click/2026/09/09/windows-netlogon-cve-2026-72982-rce-update/ #IT #Security #cybersecurity
Post summary
The tweet announces CVE-2026-72982 affecting Windows Netlogon with CVSS 9.8 RCE severity and explicitly calls for applying the September security update as a remediation measure, classifying it primarily as a Patch advisory.
0000062
204 followersView on X
Venkata Satish Guttula 🛰️@snakeyesV146d
Patch
News: Windows Netlogon CVE-2026-72982 (CVSS 9.8) lets an unauthenticated attacker run code on a domain controller with one crafted packet. Every DC is in scope. Apply Sep 2026 patches and limit who can reach Netlogon. https://www.crowdstrike.com/en-us/blog/patch-tuesday-analysis-september-2026/
Post summary
The post announces CVE‑2026‑72982, a critical Netlogon flaw that allows unauthenticated code execution on all domain controllers, and stresses the urgency of applying the September 2026 patch and applying network restrictions.
0000094
3.0K followersView on X

CPE platform detail24 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

24 of 24 entries

Part	Vendor	Product	Version	Target SW	Target HW
OS	microsoft	windows_10_1607	-	-	x64
OS	microsoft	windows_10_1607	-	-	x86
OS	microsoft	windows_10_1809	-	-	x64
OS	microsoft	windows_10_1809	-	-	x86
OS	microsoft	windows_10_21h2	-	-	arm64
OS	microsoft	windows_10_21h2	-	-	x64
OS	microsoft	windows_10_21h2	-	-	x86
OS	microsoft	windows_10_22h2	-	-	arm64
OS	microsoft	windows_10_22h2	-	-	x64
OS	microsoft	windows_10_22h2	-	-	x86
OS	microsoft	windows_11_23h2	-	-	arm64
OS	microsoft	windows_11_23h2	-	-	x64
OS	microsoft	windows_11_24h2	-	-	arm64
OS	microsoft	windows_11_24h2	-	-	x64
OS	microsoft	windows_11_25h2	-	-	arm64
OS	microsoft	windows_11_25h2	-	-	x64
OS	microsoft	windows_11_26h1	-	-	arm64
OS	microsoft	windows_11_26h1	-	-	x64
OS	microsoft	windows_server_2012	-	-	-
OS	microsoft	windows_server_2012	r2	-	-
OS	microsoft	windows_server_2016	-	-	x64
OS	microsoft	windows_server_2019	-	-	x64
OS	microsoft	windows_server_2022	-	-	x64
OS	microsoft	windows_server_2025	-	-	x64

Explore more

Back to dashboard microsoft CVEs windows_10_1607 vulnerabilities

What researchers are saying

CVE-2026-72982

Justin Elze[verified]@HackingLZGeneral

The tweet discusses the public release of CVE‑2026‑72982 and questions why attackers aren't using it, without providing any technical, exploit, or mitigation details.

Daniel B. - AI & Tech[verified]@danielbitproPatch

Microsoft’s latest Patch Tuesday disclosed multiple critical RCE vulnerabilities across several products and urged users to apply the patches provided via the supplied link.

Anurag Verma[verified]@anurag_629Patch

The text announces a critical unauthenticated RCE vulnerability (CVE-2026-72982, CVSS 9.8) in Netlogon and explicitly directs readers to update via the Patch Tuesday advisory, making the primary information the availability of a vendor patch and remediation action.

Justin Elze[verified]@HackingLZGeneral

The tweet merely cites the Microsoft security advisory for CVE-2026-72982 without providing additional details or exploitation context.

Venkata Satish Guttula 🛰️[verified]@snakeyesV1Patch

The post announces CVE‑2026‑72982, a critical Netlogon flaw that allows unauthenticated code execution on all domain controllers, and stresses the urgency of applying the September 2026 patch and applying network restrictions.

ケイ | IT・セキュリティ系副業Webライター@Teeeda_workerPatch

The post informs that a September patch was applied to address the Windows Netlogon CVE‑2026‑72982, a high‑severity RCE vulnerability with a CVSS score of 9.8.

ケイ | IT・セキュリティ系副業Webライター@Teeeda_workerPatch

The tweet alerts users to a September patch for a critical Windows Netlogon RCE vulnerability (CVE-2026-72982) with a CVSS score of 9.8, urging timely update.

ケイ | IT・セキュリティ系副業Webライター@Teeeda_workerPatch

The post warns about a high-severity Windows Netlogon CVE and urges applying the September update. It provides a CVSS score and RCE context but does not mention PoC, exploit tooling, or active exploitation.