KLA91142 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, gain privileges. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Azure Monitor Agent Metri...

PT-2026-58210

Name of the Vulnerable Software and Affected Versions Azure Active Directory versions prior to 8.19.2 Description An infinite loop occurs when an unreachable exit condition is triggered, allowing an unauthorized attacker to remotely cause a denial of service over a network. Recommendations Update...

PT-2026-58502

Out-of-bounds read in Windows Active Directory allows an authorized attacker to deny service over a network...

PT-2026-58512

Name of the Vulnerable Software and Affected Versions Windows Active Directory affected versions not specified Windows MSMQ affected versions not specified Description An integer overflow or wraparound in Windows Active Directory allows an authorized attacker to elevate privileges locally...

PT-2026-58504

Name of the Vulnerable Software and Affected Versions Active Directory Federation Services affected versions not specified Description Improper neutralization of input during web page generation leads to cross-site scripting, which allows an authorized attacker to perform spoofing over a network...

PT-2026-58209

Deserialization of untrusted data in Azure Active Directory allows an unauthorized attacker to deny service over a network...

PT-2026-58514

Name of the Vulnerable Software and Affected Versions Active Directory Certificate Services affected versions not specified Description Improper authorization allows an authorized attacker to elevate privileges over a network, enabling them to affect the system. Recommendations At the moment, the...

PT-2026-58350

Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network...

CVE-2026-50366: NULL Pointer Dereference

Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network...

CVE-2026-55001: Improper Certificate Validation

Improper certificate validation in Windows Active Directory allows an authorized attacker to elevate privileges locally...

CVE-2026-50304: Stack-based Buffer Overflow

Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network...

PT-2026-58390

Name of the Vulnerable Software and Affected Versions Active Directory Federation Services affected versions not specified Description A stack-based buffer overflow exists in Active Directory Federation Services AD FS, which allows an unauthenticated attacker to remotely trigger a denial of servi...

PT-2026-58226

Loop with unreachable exit condition 'infinite loop' in Windows Active Directory allows an unauthorized attacker to deny service over a network...

PT-2026-58259

Name of the Vulnerable Software and Affected Versions Microsoft Active Directory Federation Services affected versions not specified Description An access control weakness exists in the service and admin surfaces of Microsoft Active Directory Federation Services AD FS due to insufficient...

PT-2026-58139

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description A heap-based buffer overflow in Active Directory Domain Services allows an unauthorized attacker to execute code over a network. A heap-based buffer overflow occurs when a program...

PT-2026-58316

Loop with unreachable exit condition 'infinite loop' in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...

CVE-2026-49178: Heap-based Buffer Overflow

Heap-based buffer overflow in Active Directory Domain Services allows an authorized attacker to execute code over a network...

CVE-2026-54119: Loop with Unreachable Exit Condition

Loop with unreachable exit condition 'infinite loop' in Windows Active Directory allows an unauthorized attacker to deny service over a network...

CVE-2026-50368: Stack-based Buffer Overflow

Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network...

CVE-2026-49164: Heap-based Buffer Overflow

Heap-based buffer overflow in Active Directory Domain Services allows an unauthorized attacker to execute code over a network...