236 matches found
keycloak-services: keycloak-services: SAML broker metadata import disables response signature validation
A flaw was found in the SAML metadata import functionality of the keycloak-services component, which is the core engine for identity brokering in Red Hat Build of Keycloak. When importing identity provider metadata that lacks specific usage attributes for keys, the system incorrectly disables...
CVE-2026-16443
A flaw was found in the SAML metadata import functionality of the keycloak-services component, which is the core engine for identity brokering in Red Hat Build of Keycloak. When importing identity provider metadata that lacks specific usage attributes for keys, the system incorrectly disables...
EUVD-2026-53343
A flaw was found in the SAML metadata import functionality of the keycloak-services component, which is the core engine for identity brokering in Red Hat Build of Keycloak. When importing identity provider metadata that lacks specific usage attributes for keys, the system incorrectly disables...
CVE-2026-50466
Use after free in Windows Brokering File System allows an authorized attacker to elevate privileges locally...
CVE-2026-50458
Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally...
CVE-2026-50361
Double free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally...
CVE-2026-50305
Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally...
CVE-2026-49162
Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally...
CVE-2026-50458 Microsoft Brokering File System Elevation of Privilege Vulnerability
...
CVE-2026-50458
CVE-2026-50458 is a use-after-free vulnerability in Microsoft Brokering File System that allows an authorized local attacker to elevate privileges. Exploitation details are not provided in the public text, but the NVD/CIRCL/ENISA references confirm local privilege escalation with a CVSS v3.1 base...
CVE-2026-50458 Microsoft Brokering File System Elevation of Privilege Vulnerability
...
CVE-2026-50466 Microsoft Brokering File System Elevation of Privilege Vulnerability
...
CVE-2026-50466 Microsoft Brokering File System Elevation of Privilege Vulnerability
...
CVE-2026-50466
CVE-2026-50466 is a local privilege escalation in the Windows Brokering File System caused by a use-after-free in the Windows Brokering File System component. Public documentation confirms that an authorized attacker could elevate privileges locally (CVSSv3.1 base score 7.8, LOCAL attack vector, ...
CVE-2026-50361 Microsoft Brokering File System Elevation of Privilege Vulnerability
...
CVE-2026-50361 Microsoft Brokering File System Elevation of Privilege Vulnerability
...
CVE-2026-50361
CVE-2026-50361 describes a double free in Microsoft Brokering File System leading to local privilege elevation for an authenticated attacker. The vulnerability affects the Brokering File System component and is triggered via improper memory management that can allow an attacker with local access ...
CVE-2026-50305
CVE-2026-50305 is a Microsoft Brokering File System (Windows) use-after-free vulnerability leading to local privilege escalation for an authenticated user. The available connected data confirms the root cause as a use-after-free in the Brokering File System and a resulting privilege elevation. Ex...