4697 matches found
CVE-2026-69809
CVE-2026-69809 is a memory leak (missing release of memory after effective lifetime) in Windows Active Directory Domain Services that allows an unauthorized, unauthenticated attacker to trigger a denial of service over the network. The CVSS 3.1 score is 7.5 (High) with vector AV:N/AC:L/PR:N/UI:N/...
CVE-2026-69546
CVE-2026-69546 is a use-after-free vulnerability in Windows Active Directory Domain Services that allows an unauthorized attacker to achieve remote code execution over the network. The CVSS 3.1 score is 8.1 (High) with a vector of AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating high attack comple...
EUVD-2026-73534
Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network...
CVE-2026-62813
CVE-2026-62813 is a use after free vulnerability in Windows Active Directory Domain Services (AD DS) that allows an authorized attacker (low privileges) to achieve remote code execution over a network. The CVSS 3.1 score is 7.5 (HIGH) with high complexity and no user interaction required. No expl...
EUVD-2026-73372
Use after free in Active Directory Domain Services allows an authorized attacker to execute code over a network...
EUVD-2026-73371
Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network...
CVE-2026-62762
CVE-2026-62762 is a null pointer dereference in Windows Active Directory Domain Services that allows an authorized attacker (low privileges required) to cause a denial of service over a network. The CVSS v3.1 score is 6.5 (Medium) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H, reflecting h...
EUVD-2026-73251
Allocation of resources without limits or throttling in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...
EUVD-2026-73009
Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network...
CVE-2026-69524
CVE-2026-69524 is a use-after-free vulnerability in Windows Active Directory Domain Services that allows an unauthorized, network-based attacker to achieve remote code execution without prior authentication or user interaction. Microsoft rates it CVSS 8.1 (HIGH) with high impact on confidentialit...
EUVD-2026-73231
Heap-based buffer overflow in Active Directory Domain Services allows an authorized attacker to elevate privileges locally...
CVE-2026-69359
A heap-based buffer overflow in Active Directory Domain Services allows an authorized attacker to perform local privilege escalation . The attack requires local access with low privileges , no user interaction, and has low complexity , with high impact to confidentiality, integrity, and availabil...
NewMachineAccount
NewMachineAccount Overview NewMachineAccount.exe is a simple standalone exe tool for creating new machine accounts with custom password within a specified domain. Usage root@kitploit: NewMachineAccount.exe v1.0 by @decoderit -dc -name -domain -password -ou -user -pass -uac Parameters -dc :...
sccmhound
SCCMHound SCCMHound es un recolector BloodHound en C para Microsoft Configuration Manager MCM. Si estás buscando una forma de recopilar información de sesiones de BloodHound de los usuarios y equipos de Configuration Manager, ¡esta es la herramienta para ti! Se recomienda encarecidamente importar...
certipy-merged
certipy-merged This repository contains a fork of ly4k/Certipy with many open pull requests merged, made compatible with each other, and tested to a certain degree. As this is a work in progress , some features may or may not work as expected and things might break. Installation Using pipx...
Windows Active Directory Domain Services Remote Code Execution Vulnerability
Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network...
Active Directory Certificate Services (AD CS) Elevation of Privilege Vulnerability
Improper encoding or escaping of output in Active Directory Certificate Services AD CS allows an authorized attacker to elevate privileges locally...
September 8, 2026—KB5122880 (OS Build 22621.7582)
None None...