30303 matches found
VulnCheck KEV: CVE-2026-56155
Microsoft Active Directory Federation Services contains an insufficient granularity of access control vulnerability that allows an authorized attacker to elevate privileges locally...
PT-2026-58152
Name of the Vulnerable Software and Affected Versions Active Directory Domain Services affected versions not specified Description A heap-based buffer overflow exists in Active Directory Domain Services, which allows an authorized attacker to execute arbitrary code over a network. A heap-based...
PT-2026-58268
Name of the Vulnerable Software and Affected Versions Active Directory Domain Services affected versions not specified Description A null pointer dereference in Active Directory Domain Services allows an authorized attacker to cause a denial of service over a network. A null pointer dereference...
PT-2026-58303
Name of the Vulnerable Software and Affected Versions Active Directory Federation Services affected versions not specified Description A stack-based buffer overflow exists in Active Directory Federation Services. This flaw allows an unauthorized attacker to cause a denial of service over a networ...
PT-2026-58302
Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description Improper certificate validation in Windows Cryptographic Services allows an unauthorized attacker to bypass a security feature over a network. This issue enables remote attackers to skip the...
PT-2026-58231
Stack-based buffer overflow in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...
PT-2026-58215
Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network...
Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability
Microsoft Active Directory Federation Services contains an insufficient granularity of access control vulnerability that allows an authorized attacker to elevate privileges locally...
PT-2026-58351
Name of the Vulnerable Software and Affected Versions Windows Remote Desktop Services affected versions not specified Description A use after free condition in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network. Use after free is a memory corruption...
PT-2026-58501
Name of the Vulnerable Software and Affected Versions Windows Cryptographic Services affected versions not specified Description An issue in Windows Cryptographic Services allows an authorized attacker to locally disclose sensitive information to an unauthorized actor. Recommendations At the...
PT-2026-58514
Name of the Vulnerable Software and Affected Versions Active Directory Certificate Services affected versions not specified Description Improper authorization allows an authorized attacker to elevate privileges over a network, enabling them to affect the system. Recommendations At the moment, the...
PT-2026-58504
Name of the Vulnerable Software and Affected Versions Active Directory Federation Services affected versions not specified Description Improper neutralization of input during web page generation leads to cross-site scripting, which allows an authorized attacker to perform spoofing over a network...
PT-2026-58350
Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network...
PT-2026-58337
Name of the Vulnerable Software and Affected Versions Windows Cryptographic Services affected versions not specified Description An issue in Windows Cryptographic Services allows an authorized attacker with local access to disclose sensitive information. Recommendations At the moment, there is no...
PT-2026-58657
Name of the Vulnerable Software and Affected Versions Windows Management Services affected versions not specified Description A use-after-free condition in Windows Management Services allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that...
PT-2026-58342
Use after free in Microsoft XML Core Services allows an authorized attacker to elevate privileges locally...
PT-2026-58040
A security issue exists within FactoryTalk® Services Platform FTSP, allowing an attacker to bypass JWT signature validation during Okta Web Authentication. The vulnerability stems from the application not verifying that the JWT algorithm is configured for RSA, enabling an attacker to set the...
PT-2026-58908
Fluentd collects events from various data sources and writes them to files, RDBMS, NoSQL, IaaS, SaaS, Hadoop and so on. Prior to 1.19.3, the Fluentd out http output plugin allows placeholders such as $tag in the endpoint configuration parameter, and if a placeholder value is derived from untruste...
PT-2026-58861
Incorrect access control in the /api/License/deactivateOffline endpoint of CAXPerts UniversalPlantViewer WebServices Server v2.7.6 allows authenticated attackers with low-level privileges to cause a Denial of Service DoS via removing the license from the webserver...
CVE-2026-36035
Incorrect access control in the /api/License/deactivateOffline endpoint of CAXPerts UniversalPlantViewer WebServices Server v2.7.6 allows authenticated attackers with low-level privileges to cause a Denial of Service DoS via removing the license from the webserver...