PT-2026-58303

Name of the Vulnerable Software and Affected Versions Active Directory Federation Services affected versions not specified Description A stack-based buffer overflow exists in Active Directory Federation Services. This flaw allows an unauthorized attacker to cause a denial of service over a networ...

PT-2026-58665

Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network...

PT-2026-58268

Name of the Vulnerable Software and Affected Versions Active Directory Domain Services affected versions not specified Description A null pointer dereference in Active Directory Domain Services allows an authorized attacker to cause a denial of service over a network. A null pointer dereference...

PT-2026-58351

Name of the Vulnerable Software and Affected Versions Windows Remote Desktop Services affected versions not specified Description A use after free condition in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network. Use after free is a memory corruption...

PT-2026-58259

Name of the Vulnerable Software and Affected Versions Microsoft Active Directory Federation Services affected versions not specified Description An access control weakness exists in the service and admin surfaces of Microsoft Active Directory Federation Services AD FS due to insufficient...

CVE-2026-50695: Stack-based Buffer Overflow

Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network...

CVE-2026-50355: Stack-based Buffer Overflow

Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network...

CVE-2026-50366: NULL Pointer Dereference

Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network...

CVE-2026-50359: Use After Free

Use after free in Microsoft XML Core Services allows an authorized attacker to elevate privileges locally...

CVE-2026-58626: Use After Free

Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network...

CVE-2026-58544: Use After Free

Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally...

CVE-2026-50368: Stack-based Buffer Overflow

Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network...

CVE-2026-50302: Improper Certificate Validation

Improper certificate validation in Windows Cryptographic Services allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-10714: Weak Authentication

A security issue exists within FactoryTalk® Services Platform FTSP, allowing an attacker to bypass JWT signature validation during Okta Web Authentication. The vulnerability stems from the application not verifying that the JWT algorithm is configured for RSA, enabling an attacker to set the...

CVE-2026-50681: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of sensitive information to an unauthorized actor in Windows Cryptographic Services allows an authorized attacker to disclose information locally...

CVE-2026-50352: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of sensitive information to an unauthorized actor in Windows Cryptographic Services allows an authorized attacker to disclose information locally...

CVE-2026-50304: Stack-based Buffer Overflow

Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network...

CVE-2026-44806: Missing Release of Memory after Effective Lifetime

Missing release of memory after effective lifetime in Windows Cryptographic Services allows an unauthorized attacker to deny service over a network...

CVE-2026-57976: NULL Pointer Dereference

Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network...

CVE-2026-50684: Improper Neutralization of Input During Web Page Generation

Improper neutralization of input during web page generation 'cross-site scripting' in Active Directory Federation Services AD FS allows an authorized attacker to perform spoofing over a network...