Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal in the Files.php and Myfiles.php controllers, which insufficiently validate user-supplied paths by relying on prefix checks of the raw URL rather than resolving the canonical filesystem path. An attacker can access...

CVE-2026-58529 Windows Active Directory Federation Services (ADFS) Information Disclosure Vulnerability

...

CVE-2026-58529 Windows Active Directory Federation Services (ADFS) Information Disclosure Vulnerability

...

CVE-2026-58529

Summary (CVE-2026-58529): Out-of-bounds read in Active Directory Federation Services (AD FS) can disclose information over a network to an authorized attacker. The entry is supported by multiple connected sources (NVD/NCSC/CIRCL/NVDC/MSRC) confirming the vulnerability and its description. The CVS...

CVE-2026-50682 Active Directory Denial of Service Vulnerability

...

CVE-2026-50682

CVE-2026-50682 describes an out-of-bounds read in Windows Active Directory (Active Directory Domain Services) that can allow an authorized attacker to cause a denial of service over the network. The description and cross-references in the connected documents confirm the affected component as Wind...

CVE-2026-50682 Active Directory Denial of Service Vulnerability

...

CVE-2026-54121

CVE-2026-54121 affects Active Directory Certificate Services (AD CS). Root cause: improper authorization allowing an authorized attacker to elevate privileges over the network. Impact: elevation of privilege with high CVSS (8.8) per Microsoft-assigned metrics. Remediation: Microsoft has released ...

CVE-2026-54121 Active Directory Certificate Services Elevation of Privilege Vulnerability

...

CVE-2026-54121 Active Directory Certificate Services Elevation of Privilege Vulnerability

...

CVE-2026-50684 Active Directory Federation Server Spoofing Vulnerability

...

CVE-2026-50684 Active Directory Federation Server Spoofing Vulnerability

...

CVE-2026-50684

CVE-2026-50684 (AD FS spoofing) : The vulnerability is described as improper neutralization of input during web page generation (XSS) in Active Directory Federation Services, enabling an authorized attacker to perform spoofing over the network. The CVSS v3.1 base metrics indicate a Medium severit...

CVE-2026-50647

Loop with unreachable exit condition 'infinite loop' in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...

CVE-2026-50647

CVE-2026-50647: AD FS denial-of-service due to an infinite loop in AD FS. Public sources (NVD/EUVD/NCSC, CIRCL sighting, MSRC) confirm a network-exploitable condition causing service disruption; no exploitation details provided in the docs. Microsoft has released updates addressing the vulnerabil...

CVE-2026-50647 Active Directory Federation Server Denial of Service Vulnerability

...

CVE-2026-50647 Active Directory Federation Server Denial of Service Vulnerability

...

kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected role

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM x86 shadow paging mechanism. This vulnerability occurs when a host page directory entry PDE mapping is changed from within the guest, leading to an unexpected role mismatch in shadow paging. This mismatch can cause a...

CVE-2026-50411 Windows Active Directory Federation Services Denial of Service Vulnerability

...

CVE-2026-50411

CVE-2026-50411 affects Active Directory Federation Services (AD FS) and is described as a stack-based buffer overflow that enables a remote attacker to cause a denial of service over the network. Public references in the connected documents confirm the DoS impact and Microsoft has released update...