EUVD-2026-74832

Parse Server versions = 9.0.0 9.10.1-alpha.7 contain an authentication bypass in the built-in LDAP authentication adapter. The adapter forwarded the client-supplied password to the directory without verifying that a password had been supplied, and treated any non-error response from the directory...

adPEAS v2.5.0

adPEAS v2 — Active Directory Privilege Escalation Awesome Scripts Comprehensive Active Directory security assessment — zero dependencies, single file, ready to go. What is adPEAS? adPEAS is a PowerShell-based security assessment tool that identifies misconfigurations, vulnerabilities, and privile...

security-field-notes

Security Field Notes Archived articles on network security re...

CVE-2026-69809

Missing release of memory after effective lifetime in Active Directory Domain Services allows an unauthorized attacker to deny service over a network...

CVE-2026-69546

Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network...

CVE-2026-69524

Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network...

CVE-2026-69359

Heap-based buffer overflow in Active Directory Domain Services allows an authorized attacker to elevate privileges locally...

CVE-2026-62813

Use after free in Active Directory Domain Services allows an authorized attacker to execute code over a network...

CVE-2026-62762

Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network...

CVE-2026-69809

CVE-2026-69809 is a memory leak (missing release of memory after effective lifetime) in Windows Active Directory Domain Services that allows an unauthorized, unauthenticated attacker to trigger a denial of service over the network. The CVSS 3.1 score is 7.5 (High) with vector AV:N/AC:L/PR:N/UI:N/...

EUVD-2026-73609

Missing release of memory after effective lifetime in Active Directory Domain Services allows an unauthorized attacker to deny service over a network...

CVE-2026-69546

CVE-2026-69546 is a use-after-free vulnerability in Windows Active Directory Domain Services that allows an unauthorized attacker to achieve remote code execution over the network. The CVSS 3.1 score is 8.1 (High) with a vector of AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating high attack comple...

EUVD-2026-73534

Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network...

EUVD-2026-73372

Use after free in Active Directory Domain Services allows an authorized attacker to execute code over a network...

CVE-2026-62813

CVE-2026-62813 is a use after free vulnerability in Windows Active Directory Domain Services (AD DS) that allows an authorized attacker (low privileges) to achieve remote code execution over a network. The CVSS 3.1 score is 7.5 (HIGH) with high complexity and no user interaction required. No expl...

CVE-2026-62762

CVE-2026-62762 is a null pointer dereference in Windows Active Directory Domain Services that allows an authorized attacker (low privileges required) to cause a denial of service over a network. The CVSS v3.1 score is 6.5 (Medium) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H, reflecting h...

EUVD-2026-73371

Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network...

EUVD-2026-73251

Allocation of resources without limits or throttling in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...

EUVD-2026-73009

Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network...

CVE-2026-69524

CVE-2026-69524 is a use-after-free vulnerability in Windows Active Directory Domain Services that allows an unauthorized, network-based attacker to achieve remote code execution without prior authentication or user interaction. Microsoft rates it CVSS 8.1 (HIGH) with high impact on confidentialit...