CVE-2026-97788

An observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attacker to disclose information over a network. The vulnerability is classified as a High severity issue with a CVSS score of 7.5. The provided documents do not specify the exact root cause, affected...

CVE-2026-96252

The Active Directory Federation Services (AD FS) component is vulnerable to an improper verification of cryptographic signature . This flaw allows an unauthorized attacker to perform spoofing over a network, effectively enabling them to act as another user . The vulnerability has a CVSS 3.1 score...

EUVD-2026-100132

Incorrect authorization in Active Directory Domain Services allows an unauthorized attacker to execute code over a network...

CVE-2026-70229

A vulnerability in Active Directory Domain Services involves incorrect authorization , which allows an unauthorized attacker to perform remote code execution over a network. The vulnerability is assigned CWE-863 and has a High base severity score of 8.1. No specific version numbers, root cause te...

CVE-2026-83647

An out-of-bounds read vulnerability exists in Active Directory Domain Services . This flaw allows an unauthorized attacker to perform a denial of service (DoS) attack over a network. The vulnerability is categorized under CWE-125 . Official remediation is available via Microsoft, but specific pat...

CVE-2026-83645

A Denial of Service (DoS) vulnerability exists in Active Directory Federation Services (AD FS) due to the allocation of resources without limits or throttling (CWE-770). An unauthorized attacker can exploit this over a network to disrupt services. No specific affected versions, exploit links, or ...

CVE-2026-83511

A weak authentication vulnerability in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network. The vulnerability is associated with CWE-1390 . According to the provided metrics, the issue has a High base severity score of 7.4. Specific deta...

EUVD-2026-99750

Improper certificate validation in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-96222

Improper certificate validation in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-96222

Improper certificate validation in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-96222

A vulnerability in Active Directory Federation Services (AD FS) stems from improper certificate validation . This flaw allows an unauthorized attacker to perform spoofing over a network. The vulnerability has a base severity of 7.4 (High) according to the CVSS 3.1 metric provided. No specific exp...

CVE-2026-69982

A weak authentication vulnerability in Active Directory Federation Services (AD FS) allows an unauthorized attacker to bypass a security feature over a network. The vulnerability is associated with CWE-1390 . While the base severity score is 5.9 (Medium) , the impact is primarily on integrity (Hi...

CVE-2026-70005

Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to bypass a security feature over a network. This vulnerability is associated with CWE-1390 (Weak Authentication). While the base CVSS score is 5.9 (Medium) , the attack complexity is high. No spec...

CVE-2026-83674

A weak authentication vulnerability exists in Active Directory Federation Services (AD FS) , which may allow an unauthorized attacker to perform spoofing over a network. The vulnerability is classified with a HIGH severity base score of 8.1. No specific component-level details, exploit links, or ...

CVE-2026-85916

A vulnerability in Azure Active Directory allows an unauthorized attacker to perform a local disclosure of private personal information. The vulnerability is categorized under CWE-359 , which involves the exposure of private personal information to an unauthorized actor. The CVSS 3.1 score is 6.2...

CVE-2026-88165

An out-of-bounds write vulnerability exists in Active Directory Domain Services . This flaw allows an authorized attacker to achieve remote code execution over a network. While the vulnerability is confirmed with a HIGH base severity score (8.8), the provided documents do not specify the exact so...

CVE-2026-85321

A vulnerability in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform a Denial of Service (DoS) attack over a network. The root cause is the allocation of resources without limits or throttling (CWE-770). This flaw can lead to high availability impact. Remedia...

CVE-2026-85319

A vulnerability in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform a Denial of Service (DoS) over a network. This is caused by the allocation of resources without limits or throttling (CWE-770). The impact is a high-severity loss of availability. An officia...

CVE-2026-85324

A Denial of Service (DoS) vulnerability exists in Active Directory Federation Services (AD FS) due to memory allocation with excessive size value (CWE-789). An unauthorized attacker can exploit this flaw over a network to disrupt service availability. The CVSS 3.1 score is 7.5 (High) , indicating...

CVE-2026-83667

An out-of-bounds read vulnerability exists in Active Directory Domain Services . This flaw allows an authorized attacker to perform a denial of service over a network. While the root cause is identified as an out-of-bounds read, specific internal file paths or functions are not detailed in the pr...