Exploit for Improper Authorization in Microsoft

certighost – NXC module for CVE-2026-54121 NetExec NXC...

Active Directory Certificate Services CA Chase Configuration Checker

The Certighost NetExec SMB module checks Active Directory Certificate Services configuration for the EDITFATTRIBUTESUBJECTALTNAME2 chase flag associated with CVE-2026-54121...

CVE-2026-83666

Concurrent execution using shared resource with improper synchronization 'race condition' in Active Directory Certificate Services AD CS allows an authorized attacker to elevate privileges locally...

CVE-2026-83666

A race condition vulnerability exists in Active Directory Certificate Services (AD CS) due to concurrent execution using a shared resource with improper synchronization. This flaw allows an authorized attacker to perform a local privilege elevation . No specific version numbers or remediation ste...

CVE-2026-69624: Incomplete List of Disallowed Inputs

Incomplete list of disallowed inputs in Active Directory Certificate Services AD CS allows an authorized attacker to perform tampering over a network...

CVE-2026-69821: Improper Encoding or Escaping of Output

Improper encoding or escaping of output in Active Directory Certificate Services AD CS allows an authorized attacker to elevate privileges locally...

CVE-2026-69395: Use of Externally-Controlled Format String

Use of externally-controlled format string in Active Directory Certificate Services AD CS allows an authorized attacker to disclose information over a network...

CVE-2026-62810: Heap-based Buffer Overflow

Heap-based buffer overflow in Active Directory Certificate Services AD CS allows an authorized attacker to elevate privileges locally...

CVE-2026-62818

Use after free in Active Directory Certificate Services AD CS allows an authorized attacker to execute code over a network...

CVE-2026-62818

CVE-2026-62818 affects Microsoft Windows Active Directory Certificate Services (AD CS). The vulnerability is a use-after-free in AD CS that allows an authorized attacker to execute arbitrary code over a network. CVSS v3.1 base metrics indicate a HIGH severity (8.8) with Network attack vector, Low...

PT-2026-70558

Name of the Vulnerable Software and Affected Versions Active Directory Certificate Services affected versions not specified Description A use after free issue in Active Directory Certificate Services allows an authorized attacker to execute arbitrary code over a network, which can affect the...

CVE-2026-62818: Use After Free

Use after free in Active Directory Certificate Services AD CS allows an authorized attacker to execute code over a network...

Microsoft Active Directory Certificate Services Panel - Detect

Microsoft Active Directory Certificate Services panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Microsoft Active Directory Certificate Services panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: inf...

CVE-2026-54121: Improper Authorization

Improper authorization in Active Directory Certificate Services AD CS allows an authorized attacker to elevate privileges over a network...

CVE-2026-12249

An issue was discovered in Canonical ADSys upstream versions through v0.16.2. During Active Directory Certificate Services AD CS certificate auto-enrollment via the vendored Samba client script internal/policies/certificate/python/vendorsamba/gp/gpcertautoenrollext.py, ADSys utilizes a plaintext...

EUVD-2011-1272

Malware in sbrugna...

EUVD-2025-14469

Malicious code in bioql PyPI...

CVE-2025-29968 Active Directory Certificate Services (AD CS) Denial of Service Vulnerability

...

Active Directory Certificate Services (AD CS) Denial of Service Vulnerability

Improper input validation in Active Directory Certificate Services AD CS allows an authorized attacker to deny service over a network...

PT-2025-20971 · Microsoft · Active Directory Certificate Services +1

Name of the Vulnerable Software and Affected Versions: Active Directory Certificate Services AD CS affected versions not specified Description: The issue is related to improper input validation, which allows an authorized attacker to deny service over a network. This can affect the system, leadin...