CVE-2026-69359

A heap-based buffer overflow in Active Directory Domain Services allows an authorized attacker to perform local privilege escalation . The attack requires local access with low privileges , no user interaction, and has low complexity , with high impact to confidentiality, integrity, and availabil...

EUVD-2026-73231

Heap-based buffer overflow in Active Directory Domain Services allows an authorized attacker to elevate privileges locally...

September 8, 2026—KB5122880 (OS Build 22621.7582)

None None...

Windows Active Directory Domain Services Denial of Service Vulnerability

Missing release of memory after effective lifetime in Active Directory Domain Services allows an unauthorized attacker to deny service over a network...

Active Directory Certificate Services (AD CS) Elevation of Privilege Vulnerability

Improper encoding or escaping of output in Active Directory Certificate Services AD CS allows an authorized attacker to elevate privileges locally...

Windows Active Directory Domain Services Remote Code Execution Vulnerability

Use after free in Active Directory Domain Services allows an authorized attacker to execute code over a network...

Active Directory Domain Services Elevation of Privilege Vulnerability

Heap-based buffer overflow in Active Directory Domain Services allows an authorized attacker to elevate privileges locally...

Windows Active Directory Domain Services Remote Code Execution Vulnerability

Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network...

Windows Active Directory Domain Services Remote Code Execution Vulnerability

Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network...

Windows Active Directory Domain Services Denial of Service Vulnerability

Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network...

CVE-2026-69546: Use After Free

Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network...

CVE-2026-62810: Heap-based Buffer Overflow

Heap-based buffer overflow in Active Directory Certificate Services AD CS allows an authorized attacker to elevate privileges locally...

PT-2026-87432

Use of externally-controlled format string in Active Directory Certificate Services AD CS allows an authorized attacker to disclose information over a network...

PT-2026-87556

Name of the Vulnerable Software and Affected Versions Active Directory Domain Services affected versions not specified Description A use after free issue in Active Directory Domain Services allows an unauthorized attacker to execute arbitrary code over a network, which can affect the system. Use...

PT-2026-87539

Name of the Vulnerable Software and Affected Versions Active Directory Domain Services affected versions not specified Description A use after free issue in Active Directory Domain Services allows an unauthorized attacker to execute arbitrary code over a network, which can affect the system. Use...

PT-2026-87208

Name of the Vulnerable Software and Affected Versions Active Directory Domain Services affected versions not specified Description A null pointer dereference occurs in Active Directory Domain Services, which allows an authorized attacker to cause a denial of service over a network. A null pointer...

PT-2026-87212

Name of the Vulnerable Software and Affected Versions Active Directory Domain Services affected versions not specified Description A use after free condition in Active Directory Domain Services allows an authorized attacker to execute arbitrary code over a network, which can affect the system. Us...

CVE-2026-69395: Use of Externally-Controlled Format String

Use of externally-controlled format string in Active Directory Certificate Services AD CS allows an authorized attacker to disclose information over a network...

CVE-2026-69809: Missing Release of Memory after Effective Lifetime

Missing release of memory after effective lifetime in Active Directory Domain Services allows an unauthorized attacker to deny service over a network...

CVE-2026-69821: Improper Encoding or Escaping of Output

Improper encoding or escaping of output in Active Directory Certificate Services AD CS allows an authorized attacker to elevate privileges locally...