173 matches found
Microsoft Patch Tuesday for October 2026 — Snort rules and prominent vulnerabilities
Microsoft has released its monthly security update for October 2026, which includes 1415 vulnerabilities affecting a range of products, including 85 that Microsoft marked as "critical." Microsoft notes that 1 of the vulnerabilities disclosed this month have been exploited in the wild CVE-2026-969...
CVE-2026-70229
A vulnerability in Active Directory Domain Services involves incorrect authorization , which allows an unauthorized attacker to perform remote code execution over a network. The vulnerability is assigned CWE-863 and has a High base severity score of 8.1. No specific version numbers, root cause te...
CVE-2026-83647
An out-of-bounds read vulnerability exists in Active Directory Domain Services . This flaw allows an unauthorized attacker to perform a denial of service (DoS) attack over a network. The vulnerability is categorized under CWE-125 . Official remediation is available via Microsoft, but specific pat...
CVE-2026-88165
An out-of-bounds write vulnerability exists in Active Directory Domain Services . This flaw allows an authorized attacker to achieve remote code execution over a network. While the vulnerability is confirmed with a HIGH base severity score (8.8), the provided documents do not specify the exact so...
CVE-2026-83667
An out-of-bounds read vulnerability exists in Active Directory Domain Services . This flaw allows an authorized attacker to perform a denial of service over a network. While the root cause is identified as an out-of-bounds read, specific internal file paths or functions are not detailed in the pr...
CVE-2026-83648
A null pointer dereference vulnerability exists in Active Directory Domain Services . This flaw allows an authorized attacker to trigger a denial of service (DoS) over the network. The vulnerability is categorized under CWE-476 . No specific exploit code or information regarding in-the-wild explo...
Windows Active Directory Domain Services Remote Code Execution Vulnerability
Out-of-bounds write in Active Directory Domain Services allows an authorized attacker to execute code over a network...
PT-2026-112320
Name of the Vulnerable Software and Affected Versions Windows Active Directory Domain Services versions prior to 14393.9612 for Windows Server 2016 Windows Active Directory Domain Services versions prior to 17763.9376 for Windows Server 2019 Windows Active Directory Domain Services versions prior...
CVE-2026-69546
Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network...
CVE-2026-69359
Heap-based buffer overflow in Active Directory Domain Services allows an authorized attacker to elevate privileges locally...
EUVD-2026-73609
Missing release of memory after effective lifetime in Active Directory Domain Services allows an unauthorized attacker to deny service over a network...
EUVD-2026-73371
Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network...
CVE-2026-69524
CVE-2026-69524 is a use-after-free vulnerability in Windows Active Directory Domain Services that allows an unauthorized, network-based attacker to achieve remote code execution without prior authentication or user interaction. Microsoft rates it CVSS 8.1 (HIGH) with high impact on confidentialit...
CVE-2026-69359
A heap-based buffer overflow in Active Directory Domain Services allows an authorized attacker to perform local privilege escalation . The attack requires local access with low privileges , no user interaction, and has low complexity , with high impact to confidentiality, integrity, and availabil...
CVE-2026-69359: Heap-based Buffer Overflow
Heap-based buffer overflow in Active Directory Domain Services allows an authorized attacker to elevate privileges locally...
CVE-2026-69546: Use After Free
Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network...
PT-2026-87556
Name of the Vulnerable Software and Affected Versions Active Directory Domain Services affected versions not specified Description A use after free issue in Active Directory Domain Services allows an unauthorized attacker to execute arbitrary code over a network, which can affect the system. Use...
PT-2026-87212
Name of the Vulnerable Software and Affected Versions Active Directory Domain Services affected versions not specified Description A use after free condition in Active Directory Domain Services allows an authorized attacker to execute arbitrary code over a network, which can affect the system. Us...
PT-2026-87539
Name of the Vulnerable Software and Affected Versions Active Directory Domain Services affected versions not specified Description A use after free issue in Active Directory Domain Services allows an unauthorized attacker to execute arbitrary code over a network, which can affect the system. Use...