This vulnerability (CVE-2026-33826) arises from improper input validation in Windows Active Directory on Windows Server 2012 R2 (version 6.3.9600.0). It enables an attacker with limited privileges and adjacent network access to execute arbitrary code, potentially leading to full compromise of confidentiality, integrity, and availability. The CVSS 3.1 base score is 8.0, reflecting high impact with low attack complexity and no user interaction required. Microsoft has published an official fix for this vulnerability.

Successful exploitation allows an authorized attacker on an adjacent network to execute arbitrary code with elevated impact on confidentiality, integrity, and availability of the affected system. This could lead to full system compromise or disruption of Active Directory services.

An official fix is available from Microsoft. Administrators should apply the security update provided in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33826 to remediate this vulnerability.