52009 matches found
PT-2026-58316
Name of the Vulnerable Software and Affected Versions Active Directory Federation Services affected versions not specified Description An infinite loop occurs due to an unreachable exit condition, which allows an unauthorized attacker to cause a denial of service over a network. Recommendations A...
PT-2026-58504
Name of the Vulnerable Software and Affected Versions Active Directory Federation Services affected versions not specified Description Improper neutralization of input during web page generation leads to cross-site scripting, which allows an authorized attacker to perform spoofing over a network...
PT-2026-58302
Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description Improper certificate validation in Windows Cryptographic Services allows an unauthorized attacker to bypass a security feature over a network. This issue enables remote attackers to skip the...
PT-2026-58657
Name of the Vulnerable Software and Affected Versions Windows Management Services affected versions not specified Description A use-after-free condition in Windows Management Services allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that...
VulnCheck KEV: CVE-2026-56155
Microsoft Active Directory Federation Services contains an insufficient granularity of access control vulnerability that allows an authorized attacker to elevate privileges locally...
PT-2026-58348
Name of the Vulnerable Software and Affected Versions Active Directory Domain Services affected versions not specified Description A null pointer dereference—a condition where a program attempts to read a memory location that is null—exists in Active Directory Domain Services. This allows an...
PT-2026-58342
Use after free in Microsoft XML Core Services allows an authorized attacker to elevate privileges locally...
CVE-2026-58529: Out-of-bounds Read
Out-of-bounds read in Active Directory Federation Services AD FS allows an authorized attacker to disclose information over a network...
PT-2026-58642
Out-of-bounds read in Active Directory Federation Services AD FS allows an authorized attacker to disclose information over a network...
PT-2026-58483
Name of the Vulnerable Software and Affected Versions Active Directory Federation Services affected versions not specified Description An infinite loop occurs due to an unreachable exit condition, which allows an unauthorized attacker to cause a denial of service over a network. Recommendations A...
PT-2026-85353
CrewAI before 1.15.1 contains a server-side request forgery vulnerability in the validate url function that performs one-shot DNS resolution and blocklist checks before returning the original URL unchanged. Attackers can bypass the security filter by supplying URLs that redirect to internal...
CVE-2026-56155: Insufficient Granularity of Access Control
Insufficient granularity of access control in Active Directory Federation Services AD FS allows an authorized attacker to elevate privileges locally...
PT-2026-58303
Name of the Vulnerable Software and Affected Versions Active Directory Federation Services affected versions not specified Description A stack-based buffer overflow exists in Active Directory Federation Services. This flaw allows an unauthorized attacker to cause a denial of service over a networ...
CVE-2026-50647: Loop with Unreachable Exit Condition
Loop with unreachable exit condition 'infinite loop' in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...
PT-2026-58665
Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network...
PT-2026-58268
Name of the Vulnerable Software and Affected Versions Active Directory Domain Services affected versions not specified Description A null pointer dereference in Active Directory Domain Services allows an authorized attacker to cause a denial of service over a network. A null pointer dereference...
PT-2026-58351
Name of the Vulnerable Software and Affected Versions Windows Remote Desktop Services affected versions not specified Description A use after free condition in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network. Use after free is a memory corruption...
PT-2026-58259
Name of the Vulnerable Software and Affected Versions Microsoft Active Directory Federation Services affected versions not specified Description An access control weakness exists in the service and admin surfaces of Microsoft Active Directory Federation Services AD FS due to insufficient...
CVE-2026-50355: Stack-based Buffer Overflow
Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network...