30286 matches found
EUVD-2026-44235
Use after free in Microsoft XML Core Services allows an authorized attacker to elevate privileges locally...
CVE-2026-50359
CVE-2026-50359 is a Microsoft XML Core Services elevation-of-privilege vulnerability described as a use-after-free issue. The NVD/NCSC/CIRCL entries confirm local privilege escalation for an authorized user. No exploit vectors are provided in the documents. Microsoft has released updates addressi...
CVE-2026-50359 Microsoft XML Core Services Elevation of Privilege Vulnerability
...
CVE-2026-54121 Active Directory Certificate Services Elevation of Privilege Vulnerability
...
CVE-2026-54121
CVE-2026-54121 affects Active Directory Certificate Services (AD CS). Root cause: improper authorization allowing an authorized attacker to elevate privileges over the network. Impact: elevation of privilege with high CVSS (8.8) per Microsoft-assigned metrics. Remediation: Microsoft has released ...
CVE-2026-54121 Active Directory Certificate Services Elevation of Privilege Vulnerability
...
CVE-2026-50684
CVE-2026-50684 (AD FS spoofing) : The vulnerability is described as improper neutralization of input during web page generation (XSS) in Active Directory Federation Services, enabling an authorized attacker to perform spoofing over the network. The CVSS v3.1 base metrics indicate a Medium severit...
CVE-2026-50647
Loop with unreachable exit condition 'infinite loop' in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...
CVE-2026-50647 Active Directory Federation Server Denial of Service Vulnerability
...
CVE-2026-50444
CVE-2026-50444 is a Windows Server Update Services (WSUS) Elevation of Privilege vulnerability caused by Missing authentication for a critical function. An authorized attacker could elevate privileges over the network. Public details are supported by multiple sources (MSRC update guide, NCSC advi...
CVE-2026-50411 Windows Active Directory Federation Services Denial of Service Vulnerability
...
CVE-2026-50411
CVE-2026-50411 affects Active Directory Federation Services (AD FS) and is described as a stack-based buffer overflow that enables a remote attacker to cause a denial of service over the network. Public references in the connected documents confirm the DoS impact and Microsoft has released update...
CVE-2026-50411 Windows Active Directory Federation Services Denial of Service Vulnerability
...
CVE-2026-50411
Stack-based buffer overflow in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...
CVE-2026-50369 Windows Remote Desktop Services Elevation of Privilege Vulnerability
...
CVE-2026-50369 Windows Remote Desktop Services Elevation of Privilege Vulnerability
...
CVE-2026-50369
CVE-2026-50369 is a Windows Remote Desktop Services vulnerability identified as a use-after-free that enables an authorized attacker to elevate privileges over the network. The initial entry and multiple connected sources describe the issue consistently and confirm the affected component as Windo...
CVE-2026-50352 Windows Cryptographic Services Information Disclosure Vulnerability
...
CVE-2026-50352
CVE-2026-50352 affects Windows Cryptographic Services. Description: Exposure of sensitive information to an unauthorized actor allows a locally authenticated attacker to disclose information. Impact: information disclosure (CONFIDENTIALITY) with LOCAL attack vector; CVSS 3.1 base 5.5 (AV:L/AC:L/P...