Vulnerabilities

Improper neutralization of special elements used in a command ('command injection') in Windows Active Directory allows an authorized attacker to…

Improper neutralization of special elements used in a command ('command injection') in Windows Active Directory allows an authorized attacker to elevate privileges over a network.

Read at NIST National Vulnerability Database (CVE API 2.0)

Vendor

Microsoft

Product

Windows 10 Version 1607, Windows 10 Version 1809, Windows 10 Version 21H2

CVSS v3.1

8.0 AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Weakness

CWE-77

Exposure class

Identity, Operating system

NVD status

Awaiting Analysis

• NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
• CVE-2026-123387 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 34
   CVE NVD 3h ago

   Improper neutralization of special elements used in an os command ('os command injection') in Windows Sandbox allows an authorized attacker to…

   CVSS 7.8 CVE-2026-119906 Microsoft