Lucene search
+L

CVE-2026-56155

🗓️ 14 Jul 2026 17:05:11Reported by microsoftType 
cve
 cve
🔗 web.nvd.nist.gov📰️ 8 Media mentions👁 524 Views

CVE-2026-56155: Insufficient access control granularity in Active Directory Federation Services enables privilege elevation for an authorized attacker.

Related
Detection
Affected
Refs
Social
NVD
Vulners
CNA
Node
OR
microsoftwindows_10_1607Range<10.0.14393.9339x64
microsoftwindows_10_1607Range<10.0.14393.9339x86
microsoftwindows_10_1809Range<10.0.17763.9020x64
microsoftwindows_10_1809Range<10.0.17763.9020x86
microsoftwindows_server_2016Range<10.0.14393.9339
microsoftwindows_server_2019Range<10.0.17763.9020
microsoftwindows_server_2022Range<10.0.20348.5386
microsoftwindows_server_2025Range<10.0.26100.33158
[
  {
    "vendor": "Microsoft",
    "product": "Windows 10 Version 1607",
    "platforms": [
      "32-bit Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.14393.0",
        "lessThan": "10.0.14393.9339",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 10 Version 1809",
    "platforms": [
      "32-bit Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.17763.0",
        "lessThan": "10.0.17763.9020",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2012",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "6.2.9200.0",
        "lessThan": "6.2.9200.26226",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2012 (Server Core installation)",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "6.2.9200.0",
        "lessThan": "6.2.9200.26226",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2012 R2",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "6.3.9600.0",
        "lessThan": "6.3.9600.23291",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2012 R2 (Server Core installation)",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "6.3.9600.0",
        "lessThan": "6.3.9600.23291",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2016",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.14393.0",
        "lessThan": "10.0.14393.9339",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2016 (Server Core installation)",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.14393.0",
        "lessThan": "10.0.14393.9339",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2019",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.17763.0",
        "lessThan": "10.0.17763.9020",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2019 (Server Core installation)",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.17763.0",
        "lessThan": "10.0.17763.9020",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2022",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.20348.0",
        "lessThan": "10.0.20348.5386",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2025",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.26100.0",
        "lessThan": "10.0.26100.33158",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2025 (Server Core installation)",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.26100.0",
        "lessThan": "10.0.26100.33158",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

03 Aug 2026 22:53Current
6Medium risk
Vulners AI Score6
CVSS 3.17.8
EPSS0.02333
SSVC
524