CVE-2026-69809

CVE-2026-69809 is a memory leak (missing release of memory after effective lifetime) in Windows Active Directory Domain Services that allows an unauthorized, unauthenticated attacker to trigger a denial of service over the network. The CVSS 3.1 score is 7.5 (High) with vector AV:N/AC:L/PR:N/UI:N/...

EUVD-2026-73534

Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network...

CVE-2026-69546

CVE-2026-69546 is a use-after-free vulnerability in Windows Active Directory Domain Services that allows an unauthorized attacker to achieve remote code execution over the network. The CVSS 3.1 score is 8.1 (High) with a vector of AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating high attack comple...

EUVD-2026-73372

Use after free in Active Directory Domain Services allows an authorized attacker to execute code over a network...

CVE-2026-62813

CVE-2026-62813 is a use after free vulnerability in Windows Active Directory Domain Services (AD DS) that allows an authorized attacker (low privileges) to achieve remote code execution over a network. The CVSS 3.1 score is 7.5 (HIGH) with high complexity and no user interaction required. No expl...

CVE-2026-62762

CVE-2026-62762 is a null pointer dereference in Windows Active Directory Domain Services that allows an authorized attacker (low privileges required) to cause a denial of service over a network. The CVSS v3.1 score is 6.5 (Medium) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H, reflecting h...

EUVD-2026-73371

Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network...

EUVD-2026-73251

Allocation of resources without limits or throttling in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...

EUVD-2026-73009

Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network...

CVE-2026-69524

CVE-2026-69524 is a use-after-free vulnerability in Windows Active Directory Domain Services that allows an unauthorized, network-based attacker to achieve remote code execution without prior authentication or user interaction. Microsoft rates it CVSS 8.1 (HIGH) with high impact on confidentialit...

CVE-2026-69359

A heap-based buffer overflow in Active Directory Domain Services allows an authorized attacker to perform local privilege escalation . The attack requires local access with low privileges , no user interaction, and has low complexity , with high impact to confidentiality, integrity, and availabil...

EUVD-2026-73231

Heap-based buffer overflow in Active Directory Domain Services allows an authorized attacker to elevate privileges locally...

Active Directory Certificate Services (AD CS) Elevation of Privilege Vulnerability

Improper encoding or escaping of output in Active Directory Certificate Services AD CS allows an authorized attacker to elevate privileges locally...

Windows Active Directory Domain Services Remote Code Execution Vulnerability

Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network...

Active Directory Domain Services Elevation of Privilege Vulnerability

Heap-based buffer overflow in Active Directory Domain Services allows an authorized attacker to elevate privileges locally...

Windows Active Directory Domain Services Remote Code Execution Vulnerability

Use after free in Active Directory Domain Services allows an authorized attacker to execute code over a network...

Windows Active Directory Domain Services Denial of Service Vulnerability

Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network...

Windows Active Directory Domain Services Denial of Service Vulnerability

Missing release of memory after effective lifetime in Active Directory Domain Services allows an unauthorized attacker to deny service over a network...

Windows Active Directory Domain Services Remote Code Execution Vulnerability

Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network...

SolarWinds Web Help Desk < 12.8.3 - Insecure Deserialization

SolarWinds Web Help Desk before version 12.8.3 contain a critical Java deserialization vulnerability that enables remote code execution. Attackers can exploit this flaw to execute arbitrary commands on the host machine. Initially reported as unauthenticated, SolarWinds was unable to reproduce...