Aug 2026: Active Directory Security Feature Bypass Vulnerability
CVE-2026-65777 Published on August 11, 2026
Active Directory Security Feature Bypass Vulnerability
Inadequate encryption strength in Windows Active Directory allows an authorized attacker to bypass a security feature over a network.
Weakness Type
Inadequate Encryption Strength
The software stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required. A weak encryption scheme can be subjected to brute force attacks that have a reasonable chance of succeeding using current attack methods and resources.
Products Associated with CVE-2026-65777
Want to know whenever a new CVE is published for Microsoft products? stack.watch will email you.
Affected Versions
Microsoft Windows 11 version 23H2:- Version 10.0.22631.0 and below 10.0.22631.7517 is affected.
- Version 10.0.22631.0 and below 10.0.22631.7517 is affected.
- Version 10.0.26100.0 and below 10.0.26100.9168 is affected.
- Version 10.0.26200.0 and below 10.0.26200.9168 is affected.
- Version 10.0.28000.0 and below 10.0.28000.2704 is affected.
- Version 10.0.20348.0 and below 10.0.20348.5499 is affected.
- Version 10.0.26100.0 and below 10.0.26100.33296 is affected.
- Version 10.0.26100.0 and below 10.0.26100.33296 is affected.