EUVD-2026-99637

Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally...

CVE-2026-83674

A weak authentication vulnerability exists in Active Directory Federation Services (AD FS) , which may allow an unauthorized attacker to perform spoofing over a network. The vulnerability is classified with a HIGH severity base score of 8.1. No specific component-level details, exploit links, or ...

EUVD-2026-99618

Weak authentication in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-88165

An out-of-bounds write vulnerability exists in Active Directory Domain Services . This flaw allows an authorized attacker to achieve remote code execution over a network. While the vulnerability is confirmed with a HIGH base severity score (8.8), the provided documents do not specify the exact so...

EUVD-2026-99595

Out-of-bounds write in Active Directory Domain Services allows an authorized attacker to execute code over a network...

CVE-2026-85795

A Use after free vulnerability exists in the Windows Text Services Framework . This flaw allows an authorized attacker to achieve local privilege elevation . No specific technical root cause, affected versions, or exploit links are provided in the documentation; however, an official fix is noted ...

EUVD-2026-99507

Use after free in Windows Text Services Framework allows an authorized attacker to elevate privileges locally...

CVE-2026-85324

A Denial of Service (DoS) vulnerability exists in Active Directory Federation Services (AD FS) due to memory allocation with excessive size value (CWE-789). An unauthorized attacker can exploit this flaw over a network to disrupt service availability. The CVSS 3.1 score is 7.5 (High) , indicating...

EUVD-2026-99460

Allocation of resources without limits or throttling in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...

EUVD-2026-99464

Memory allocation with excessive size value in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...

EUVD-2026-99461

Allocation of resources without limits or throttling in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...

CVE-2026-85321

A vulnerability in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform a Denial of Service (DoS) attack over a network. The root cause is the allocation of resources without limits or throttling (CWE-770). This flaw can lead to high availability impact. Remedia...

CVE-2026-85319

A vulnerability in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform a Denial of Service (DoS) over a network. This is caused by the allocation of resources without limits or throttling (CWE-770). The impact is a high-severity loss of availability. An officia...

EUVD-2026-99321

Out-of-bounds read in Active Directory Domain Services allows an authorized attacker to deny service over a network...

CVE-2026-83667

An out-of-bounds read vulnerability exists in Active Directory Domain Services . This flaw allows an authorized attacker to perform a denial of service over a network. While the root cause is identified as an out-of-bounds read, specific internal file paths or functions are not detailed in the pr...

EUVD-2026-99312

Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network...

CVE-2026-83646

A URL redirection to an untrusted site (open redirect ) vulnerability exists in Active Directory Federation Services (AD FS) . This flaw allows an authorized attacker to perform spoofing over a network. The vulnerability is categorized under CWE-601 and has a Medium base severity score of 4.8. No...

EUVD-2026-99311

Url redirection to untrusted site 'open redirect' in Active Directory Federation Services AD FS allows an authorized attacker to perform spoofing over a network...

CVE-2026-83648

A null pointer dereference vulnerability exists in Active Directory Domain Services . This flaw allows an authorized attacker to trigger a denial of service (DoS) over the network. The vulnerability is categorized under CWE-476 . No specific exploit code or information regarding in-the-wild explo...

CVE-2026-83666

A race condition vulnerability exists in Active Directory Certificate Services (AD CS) due to concurrent execution using a shared resource with improper synchronization. This flaw allows an authorized attacker to perform a local privilege elevation . No specific version numbers or remediation ste...