---
id: 6168
title: "CVE-2026-41089 — Microsoft Windows Netlogon BuildSamLogonResponse Stack-based Buffer Overflow RCE"
cve: CVE-2026-41089
source_domain: aretiq.ai
source_url: "https://aretiq.ai/research/vul260513-cve-2026-41089-microsoft-windows-netlogon-buildsamlogonresponse-stack-based-buffer-overflow-rce/"
published_at: "2026-05-13T00:00:00Z"
tags: ["rce", "denial-of-service", "stack-overflow", "domain-controller", "netlogon", "cve-2026-41089"]
phying_url: "https://phying.com/item/6168"
lang: en
---

# CVE-2026-41089 — Microsoft Windows Netlogon BuildSamLogonResponse Stack-based Buffer Overflow RCE

## Summary

CVE-2026-41089: a stack-based buffer overflow in Windows Netlogon's CLDAP DC locator response can crash LSASS and force domain controller reboots, depending on DNS naming length.

## Intelligence Metadata

- **Sources:** aretiq.ai
- **CVE:** CVE-2026-41089
- **Published:** 2026-05-13T00:00:00Z
- **Original:** https://aretiq.ai/research/vul260513-cve-2026-41089-microsoft-windows-netlogon-buildsamlogonresponse-stack-based-buffer-overflow-rce/
- **Phying News:** https://phying.com/item/6168