33130 matches found
EUVD-2026-35692
Stack-based buffer overflow in Active Directory Domain Services allows an authorized attacker to execute code over a network...
Reconstructing AI activity in investigations
AI systems are now part of everyday work. Investigators need a consistent way to reconstruct what happened within them. Security teams are already investigating activity involving Microsoft 365 Copilot and Azure AI services—from prompt injection attempts to unexpected data access. Those signals a...
CVE-2026-45648
Stack-based buffer overflow in Active Directory Domain Services allows an authorized attacker to execute code over a network...
CVE-2026-44810
Improper authentication in Windows Cryptographic Services allows an unauthorized attacker to elevate privileges locally...
CVE-2026-42987
Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network...
CVE-2026-34182
Issue Summary: Cryptographic Message Services CMS processing fails to perform sufficient input validation on the cipher and tag length fields of AuthEnvelopedData containers, leading to various potential compromises. Impact Summary: Attackers making use of these vulnerabilities may achieve...
CVE-2026-42987 Windows Deployment Services (WDS) Remote Code Execution
...
EUVD-2026-35757
Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network...
CVE-2026-42987 Windows Deployment Services (WDS) Remote Code Execution
...
CVE-2026-42987
The CVE-2026-42987 entry concerns a use-after-free in Windows Deployment Services (WDS) that enables an unauthenticated attacker to achieve remote code execution over the network . The associated CVSS 3.1 vector indicates network access, high impact on confidentiality, integrity, and availability...
CVE-2026-44810 Microsoft Cryptographic Services Elevation of Privilege Vulnerability
...
EUVD-2026-35744
Improper authentication in Windows Cryptographic Services allows an unauthorized attacker to elevate privileges locally...
CVE-2026-44810 Microsoft Cryptographic Services Elevation of Privilege Vulnerability
...
CVE-2026-44810
CVE-2026-44810: Improper authentication in Windows Cryptographic Services allows a local attacker to elevate privileges. Affected: Windows Cryptographic Services. Impact: HIGH (CVSS 3.1 base 8.4) with local attack, no user interaction required; confidentiality, integrity, and availability are HIG...
CVE-2026-45648 Windows Active Directory Domain Services Remote Code Execution Vulnerability
...
CVE-2026-45648 Windows Active Directory Domain Services Remote Code Execution Vulnerability
...
CVE-2026-45648
The CVE-2026-45648 entry pertains to a stack-based buffer overflow in Windows Active Directory Domain Services that allows an authorized network attacker to execute code. Affected component is Active Directory Domain Services; root cause is a buffer overflow vulnerability. Impact is remote code e...
CVE-2026-34182
Issue Summary: Cryptographic Message Services CMS processing fails to perform sufficient input validation on the cipher and tag length fields of AuthEnvelopedData containers, leading to various potential compromises. Impact Summary: Attackers making use of these vulnerabilities may achieve...
