Windows Active Directory Domain Services Denial of Service Vulnerability

Missing release of memory after effective lifetime in Active Directory Domain Services allows an unauthorized attacker to deny service over a network...

Windows Active Directory Domain Services Remote Code Execution Vulnerability

Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network...

SolarWinds Web Help Desk < 12.8.3 - Insecure Deserialization

SolarWinds Web Help Desk before version 12.8.3 contain a critical Java deserialization vulnerability that enables remote code execution. Attackers can exploit this flaw to execute arbitrary commands on the host machine. Initially reported as unauthenticated, SolarWinds was unable to reproduce...

Flaws in Adobe Commerce and Magento

Adobe has identified a vulnerability in Adobe Commerce and Magento. The vulnerability lies in the template engine of Adobe Commerce, where certain special elements are not properly neutralized. As a result, an attacker can execute arbitrary code remotely, without requiring user interaction. This...

CVE-2026-19397

CVE-2026-19397 is a missing authentication vulnerability in ASUS Control Center Express Agent . When the host has an active login session, an unauthenticated user on the adjacent network can directly connect to the agent and control the host. The flaw affects a critical function within the agent ...

CVE-2026-62762: NULL Pointer Dereference

Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network...

PT-2026-87212

Name of the Vulnerable Software and Affected Versions Active Directory Domain Services affected versions not specified Description A use after free condition in Active Directory Domain Services allows an authorized attacker to execute arbitrary code over a network, which can affect the system. Us...

CVE-2026-86994: Missing Authorization

n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the /rest/active-workflows endpoint returned every active workflow ID on the instance to any member regardless of sharing. Workflow activation, deactivation, and publication push events were also broadcast ...

CVE-2026-62810: Heap-based Buffer Overflow

Heap-based buffer overflow in Active Directory Certificate Services AD CS allows an authorized attacker to elevate privileges locally...

CVE-2026-72978: Allocation of Resources Without Limits or Throttling

Allocation of resources without limits or throttling in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...

CVE-2026-69546: Use After Free

Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network...

CVE-2026-69821: Improper Encoding or Escaping of Output

Improper encoding or escaping of output in Active Directory Certificate Services AD CS allows an authorized attacker to elevate privileges locally...

CVE-2026-69395: Use of Externally-Controlled Format String

Use of externally-controlled format string in Active Directory Certificate Services AD CS allows an authorized attacker to disclose information over a network...

CVE-2026-69359: Heap-based Buffer Overflow

Heap-based buffer overflow in Active Directory Domain Services allows an authorized attacker to elevate privileges locally...

CVE-2026-69624: Incomplete List of Disallowed Inputs

Incomplete list of disallowed inputs in Active Directory Certificate Services AD CS allows an authorized attacker to perform tampering over a network...

PT-2026-87539

Name of the Vulnerable Software and Affected Versions Active Directory Domain Services affected versions not specified Description A use after free issue in Active Directory Domain Services allows an unauthorized attacker to execute arbitrary code over a network, which can affect the system. Use...

PT-2026-88503

Impact The endpoint /rest/active-workflows returned every active workflow ID on the instance to any member, regardless of sharing, and workflow activation, deactivation and publication push events were broadcast to every connected client, carrying workflow IDs, version IDs and activation-error...

PT-2026-87735

Missing release of memory after effective lifetime in Active Directory Domain Services allows an unauthorized attacker to deny service over a network...

PT-2026-87432

Use of externally-controlled format string in Active Directory Certificate Services AD CS allows an authorized attacker to disclose information over a network...

PT-2026-87208

Name of the Vulnerable Software and Affected Versions Active Directory Domain Services affected versions not specified Description A null pointer dereference occurs in Active Directory Domain Services, which allows an authorized attacker to cause a denial of service over a network. A null pointer...