KLA91142 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, gain privileges. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Azure Monitor Agent Metri...

CVE-2026-50355: Stack-based Buffer Overflow

Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network...

CVE-2026-50366: NULL Pointer Dereference

Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network...

CVE-2026-50368: Stack-based Buffer Overflow

Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network...

CVE-2026-58529: Out-of-bounds Read

Out-of-bounds read in Active Directory Federation Services AD FS allows an authorized attacker to disclose information over a network...

CVE-2026-50682: Out-of-bounds Read

Out-of-bounds read in Windows Active Directory allows an authorized attacker to deny service over a network...

CVE-2026-50647: Loop with Unreachable Exit Condition

Loop with unreachable exit condition 'infinite loop' in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...

CVE-2026-54115: Integer Overflow or Wraparound

Integer overflow or wraparound in Windows Active Directory allows an authorized attacker to elevate privileges locally...

CVE-2026-50304: Stack-based Buffer Overflow

Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network...

CVE-2026-50652: Deserialization of Untrusted Data

Deserialization of untrusted data in Azure Active Directory allows an unauthorized attacker to deny service over a network...

CVE-2026-54119: Loop with Unreachable Exit Condition

Loop with unreachable exit condition 'infinite loop' in Windows Active Directory allows an unauthorized attacker to deny service over a network...

CVE-2026-57976: NULL Pointer Dereference

Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network...

CVE-2026-55001: Improper Certificate Validation

Improper certificate validation in Windows Active Directory allows an authorized attacker to elevate privileges locally...

CVE-2026-50684: Improper Neutralization of Input During Web Page Generation

Improper neutralization of input during web page generation 'cross-site scripting' in Active Directory Federation Services AD FS allows an authorized attacker to perform spoofing over a network...

PT-2026-58390

Name of the Vulnerable Software and Affected Versions Active Directory Federation Services affected versions not specified Description A stack-based buffer overflow exists in Active Directory Federation Services AD FS, which allows an unauthenticated attacker to remotely trigger a denial of servi...

CVE-2026-50653: Loop with Unreachable Exit Condition

Loop with unreachable exit condition 'infinite loop' in Azure Active Directory allows an unauthorized attacker to deny service over a network...

CVE-2026-49178: Heap-based Buffer Overflow

Heap-based buffer overflow in Active Directory Domain Services allows an authorized attacker to execute code over a network...

PT-2026-58215

Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network...

VulnCheck KEV: CVE-2026-56155

Microsoft Active Directory Federation Services contains an insufficient granularity of access control vulnerability that allows an authorized attacker to elevate privileges locally...

CentOS 9 : sssd-2.9.9-3.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the sssd-2.9.9-3.el9 build changelog. - sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation CVE-2026-14474 - path...