Microsoft patches critical unauthenticated LDAP remote code execution defect
What happened.Microsoft resolved a maximum-severity remote code execution flaw in Active Directory Lightweight Directory Access Protocol during its monthly security release.
Why it matters.Active Directory is the central identity authority for corporate enterprise networks worldwide. When unauthenticated network vulnerabilities permit arbitrary code execution on domain controllers, attackers gain administrative control over all domain assets. Enterprise systems engineers must apply the latest Windows Server security rollups to domain infrastructure immediately.
