CVE-2026-50304 Windows Active Directory Federation Services Denial of Service Vulnerability

...

CVE-2026-49178 Windows Active Directory Domain Services Remote Code Execution Vulnerability

...

CVE-2026-49178 Windows Active Directory Domain Services Remote Code Execution Vulnerability

...

CVE-2026-49178

CVE-2026-49178 is a heap-based buffer overflow in Windows Active Directory Domain Services that enables a network-based remote code execution by an authenticated, low-privilege attacker. The affected component is AD DS; the vulnerability enables code execution with high impact on confidentiality,...

CVE-2026-50653 Azure Active Directory Denial of Service Vulnerability

...

CVE-2026-50653

Loop with unreachable exit condition 'infinite loop' in Azure Active Directory allows an unauthorized attacker to deny service over a network...

CVE-2026-50653 Azure Active Directory Denial of Service Vulnerability

...

CVE-2026-50653

CVE-2026-50653 describes an infinite loop with an unreachable exit condition in Azure Active Directory that can allow a network-based denial of service. The provided documents confirm the issue and its impact as a denial of service via network, but do not include specific exploitation details, af...

CVE-2026-50652 Azure Active Directory Denial of Service Vulnerability

...

CVE-2026-50652 Azure Active Directory Denial of Service Vulnerability

...

CVE-2026-50652

Deserialization of untrusted data in Azure Active Directory allows an unauthorized attacker to deny service over a network...

CVE-2026-50652

CVE-2026-50652: A deserialization of untrusted data flaw in Azure Active Directory enables a network-based Denial of Service. The vulnerability is triggered remotely (network vector), requires no authentication and no user interaction, and results in availability impact (A:H) with no confidential...

CVE-2026-57976 Windows Active Directory Domain Services Denial of Service Vulnerability

...

CVE-2026-57976 Windows Active Directory Domain Services Denial of Service Vulnerability

...

CVE-2026-57976

The CVE-2026-57976 entry concerns Windows Active Directory Domain Services and is triggered by a null pointer dereference that can cause a denial of service over the network by an authorized attacker. The NVD entry corroborates a CVSS v3.1 base score of 6.5 (Medium), with NETWORK attack vector, L...

CVE-2026-56155 Active Directory Federation Services Elevation of Privilege Vulnerability

...

CVE-2026-56155

Insufficient granularity of access control in Active Directory Federation Services AD FS allows an authorized attacker to elevate privileges locally...

CVE-2026-56155 Active Directory Federation Services Elevation of Privilege Vulnerability

...

CVE-2026-56155

CVE-2026-56155 affects Active Directory Federation Services (AD FS) with insufficient granularity in access control, enabling an authorized local attacker to escalate privileges. Documents indicate a Privilege Escalation impact and note updates have been released by Microsoft to address the vulne...

CVE-2026-54119

CVE-2026-54119 describes a loop with an unreachable exit condition in Windows Active Directory that can be exploited to cause a network-based denial of service by an unauthorized attacker. The affected component is Windows Active Directory; the vulnerability stems from an infinite loop, leading t...