CVE-2026-83645

A Denial of Service (DoS) vulnerability exists in Active Directory Federation Services (AD FS) due to the allocation of resources without limits or throttling (CWE-770). An unauthorized attacker can exploit this over a network to disrupt services. No specific affected versions, exploit links, or ...

EUVD-2026-99934

Allocation of resources without limits or throttling in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...

EUVD-2026-99935

Out-of-bounds read in Active Directory Domain Services allows an unauthorized attacker to deny service over a network...

CVE-2026-83647

An out-of-bounds read vulnerability exists in Active Directory Domain Services . This flaw allows an unauthorized attacker to perform a denial of service (DoS) attack over a network. The vulnerability is categorized under CWE-125 . Official remediation is available via Microsoft, but specific pat...

CVE-2026-83511

A weak authentication vulnerability in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network. The vulnerability is associated with CWE-1390 . According to the provided metrics, the issue has a High base severity score of 7.4. Specific deta...

EUVD-2026-99907

Weak authentication in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...

EUVD-2026-99895

Heap-based buffer overflow in Windows Internet Information Services allows an authorized attacker to elevate privileges locally...

CVE-2026-78459

A heap-based buffer overflow vulnerability exists in Windows Internet Information Services . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability has a CVSS 3.1 score of 7.8 (High) . Official remediation is available via Microsoft's update guide.

CVE-2026-69992

A Use after free vulnerability exists in Windows Remote Desktop Services , which could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a High severity rating with a CVSS 3.1 score of 7.5 . While the documents do not specify the exact file or f...

EUVD-2026-99853

Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network...

CVE-2026-70055

A vulnerability in Windows Cryptographic Services allows an authorized attacker to perform a local information disclosure . The flaw results in the exposure of sensitive system information to an unauthorized control sphere. This vulnerability is associated with CWE-497 . While a specific root cau...

EUVD-2026-99860

Exposure of sensitive system information to an unauthorized control sphere in Windows Cryptographic Services allows an authorized attacker to disclose information locally...

CVE-2026-96222

Improper certificate validation in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...

EUVD-2026-99750

Improper certificate validation in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-96222

A vulnerability in Active Directory Federation Services (AD FS) stems from improper certificate validation . This flaw allows an unauthorized attacker to perform spoofing over a network. The vulnerability has a base severity of 7.4 (High) according to the CVSS 3.1 metric provided. No specific exp...

CVE-2026-96222

Improper certificate validation in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...

EUVD-2026-99671

Stack-based buffer overflow in Windows Internet Information Services allows an unauthorized attacker to execute code over a network...

CVE-2026-70024

A stack-based buffer overflow exists in Windows Internet Information Services (IIS), which could allow an unauthorized attacker to execute arbitrary code over a network. The vulnerability is characterized by improper input validation (CWE-20) and has a CRITICAL severity score of 9.80. This flaw a...

EUVD-2026-99668

Weak authentication in Active Directory Federation Services AD FS allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-69982

A weak authentication vulnerability in Active Directory Federation Services (AD FS) allows an unauthorized attacker to bypass a security feature over a network. The vulnerability is associated with CWE-1390 . While the base severity score is 5.9 (Medium) , the impact is primarily on integrity (Hi...