CVE-2026-65777: Active Directory Security Feature Bypass Vulnerability
Published Aug 11, 2026
·Updated
Active Directory Security Feature Bypass Vulnerability
Other sources
Inadequate encryption strength in Windows Active Directory allows an authorized attacker to bypass a security feature over a network.
— Microsoft
Affected Software
23 affected componentsFixes available
Microsoft Windows Active Directory
Microsoft Windows Server 2022<10.0.20348.5499, <10.0.20348.5440
10.0.20348.549910.0.20348.5440
Microsoft Windows Server 2022<10.0.20348.5499, <10.0.20348.5440
10.0.20348.549910.0.20348.5440
Microsoft Windows Server 2025<10.0.26100.33296, <10.0.26100.33222
10.0.26100.3329610.0.26100.33222
Microsoft Windows 11=26H1
10.0.28000.2704
Microsoft Windows 11=26H1
10.0.28000.2704
Microsoft Windows Server 2025<10.0.26100.33296, <10.0.26100.33222
10.0.26100.3329610.0.26100.33222
Microsoft Windows 11=23H2
10.0.22631.7517
Microsoft Windows 11=23H2
10.0.22631.7517
Microsoft Windows 11=25H2
10.0.26200.916810.0.26200.9106
Microsoft Windows 11=24H2
10.0.26100.916810.0.26100.9106
Microsoft Windows 11=25H2
10.0.26200.916810.0.26200.9106
Microsoft Windows 11=24H2
10.0.26100.916810.0.26200.9106
Microsoft Windows 11 23h2<10.0.22631.7517
Microsoft Windows 11 23h2<10.0.22631.7517
Microsoft Windows 11 24h2<10.0.26100.9106
Microsoft Windows 11 24h2<10.0.26100.9106
Microsoft Windows 11 25h2<=10.0.26200.9106
Microsoft Windows 11 25h2<10.0.26200.9106
Microsoft Windows 11 26h1<10.0.28000.2704
Microsoft Windows 11 26h1<10.0.28000.2704
Microsoft Windows Server 2022<10.0.20348.5440
Microsoft Windows Server 2025<10.0.26100.33222
Remediation
Event History
Aug 11, 2026
CVE Published
via Microsoft·02:00 PM
Data Sourced
via Microsoft·02:00 PM
DescriptionSeverityWeakness
Data Sourced
via Microsoft·02:00 PM
Affected Software
Updated
via Microsoft·02:00 PM
Description
CVE Published
via MITRE·05:06 PM
Data Sourced
via MITRE·05:06 PM
DescriptionSeverity
Data Sourced
via NVD·05:18 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-65777?
CVE-2026-65777 has a medium severity rating of 5.3.
2
How does CVE-2026-65777 affect Microsoft Windows products?
CVE-2026-65777 allows an authorized attacker to bypass security features in Microsoft Active Directory due to inadequate encryption strength.
3
What types of products are vulnerable to CVE-2026-65777?
CVE-2026-65777 affects Microsoft Windows 11, Windows Server 2022, Windows Server 2025, and Microsoft Windows Active Directory.
4
What is the vector of attack for CVE-2026-65777?
CVE-2026-65777 can be exploited over a network by an authorized attacker.
5
What is the recommended action for mitigating CVE-2026-65777?
To mitigate CVE-2026-65777, users should apply security updates provided by Microsoft as soon as they are available.