138 matches found
CVE-2026-65777
Inadequate encryption strength in Windows Active Directory allows an authorized attacker to bypass a security feature over a network...
EUVD-2026-56731
Inadequate encryption strength in Windows Active Directory allows an authorized attacker to bypass a security feature over a network...
EUVD-2026-56302
Improper neutralization of special elements used in a command 'command injection' in Windows Active Directory allows an unauthorized attacker to execute code over a network...
CVE-2026-49179
Improper neutralization of special elements used in a command 'command injection' in Windows Active Directory allows an unauthorized attacker to execute code over a network...
Windows Active Directory Domain Services Remote Code Execution Vulnerability
Improper neutralization of special elements used in a command 'command injection' in Windows Active Directory allows an unauthorized attacker to execute code over a network...
PT-2026-70672
Name of the Vulnerable Software and Affected Versions Windows Active Directory affected versions not specified Description Inadequate encryption strength allows an authorized attacker to bypass a security feature over a network, which can lead to an impact on the system. Recommendations At the...
PT-2026-70385
Name of the Vulnerable Software and Affected Versions Windows Active Directory affected versions not specified Description Improper neutralization of special elements used in a command, known as command injection, allows an unauthorized remote attacker to execute arbitrary code over a network and...
CVE-2026-50682
Out-of-bounds read in Windows Active Directory allows an authorized attacker to deny service over a network...
CVE-2026-55001
Improper certificate validation in Windows Active Directory allows an authorized attacker to elevate privileges locally...
CVE-2026-54119
Loop with unreachable exit condition 'infinite loop' in Windows Active Directory allows an unauthorized attacker to deny service over a network...
CVE-2026-57976 Windows Active Directory Domain Services Denial of Service Vulnerability
...
CVE-2026-54119
Loop with unreachable exit condition 'infinite loop' in Windows Active Directory allows an unauthorized attacker to deny service over a network...
CVE-2026-55001
CVE-2026-55001 affects Windows Active Directory / Active Directory Domain Services. The root cause is improper certificate validation within AD, enabling an authorized attacker to achieve local privilege escalation. CVSS 3.1 base score 7.8 (Local, Low complexity, Privileges Required: Low; User In...
CVE-2026-54983 Windows Active Directory Federation Services Denial of Service Vulnerability
...
CVE-2026-49164 Windows Active Directory Domain Services Remote Code Execution Vulnerability
...
Windows Active Directory Denial of Service Vulnerability
Loop with unreachable exit condition 'infinite loop' in Windows Active Directory allows an unauthorized attacker to deny service over a network...
PT-2026-58245
Improper certificate validation in Windows Active Directory allows an authorized attacker to elevate privileges locally...
PT-2026-58512
Name of the Vulnerable Software and Affected Versions Windows Active Directory affected versions not specified Windows MSMQ affected versions not specified Description An integer overflow or wraparound in Windows Active Directory allows an authorized attacker to elevate privileges locally...
openssh: OpenSSH: Undocumented GSSAPIStrictAcceptorCheck behavior impacts security in Windows Active Directory
A flaw was found in OpenSSH. The sshd component has an undocumented security-relevant behavior where GSSAPIStrictAcceptorCheck has no value when the server is in a Windows Active Directory environment. This could lead to unintended information disclosure and impact data integrity...
CVE-2026-59998
A flaw was found in OpenSSH. The sshd component has an undocumented security-relevant behavior where GSSAPIStrictAcceptorCheck has no value when the server is in a Windows Active Directory environment. This could lead to unintended information disclosure and impact data integrity. Mitigation To...