CVE-2026-89105 Improper Authentication in HybridTokenAuthenticator of SAP/cloud-security-services-integration-library

The HybridTokenAuthenticator component of the SAP/cloud-security-services-integration-library accepts tokens from unintended ambient IAS/XSUAA bindings, potentially allowing unauthorized access. This vulnerability allows an attacker to gain unauthorized access to the system by using tokens that...

CVE-2026-89105

The SAP/cloud-security-services-integration-library contains an improper authentication vulnerability in its HybridTokenAuthenticator component. The flaw occurs because the component accepts tokens from unintended ambient IAS/XSUAA bindings , which could allow an attacker to gain unauthorized acc...

CVE-2026-96222

Improper certificate validation in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...

UBUNTU-CVE-2026-96222

Improper certificate validation in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...

PT-2026-118135

Уязвимость службы Active Directory Federation Services AD FS операционных систем Windows связана с обходом аутентификации посредством спуфинга. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, проводить спуфинг-атаки...

PT-2026-112717

Memory allocation with excessive size value in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...

PT-2026-112712

Allocation of resources without limits or throttling in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...

PT-2026-112479

Name of the Vulnerable Software and Affected Versions Active Directory Federation Services affected versions not specified Description Weak authentication allows an unauthorized attacker to perform spoofing over a network, which enables them to affect the system. Recommendations At the moment,...

PT-2026-112413

Name of the Vulnerable Software and Affected Versions Active Directory Federation Services affected versions not specified Description Weak authentication allows an unauthorized attacker to perform spoofing over a network, which enables them to affect the system. Recommendations At the moment,...

PT-2026-112473

Out-of-bounds read in Active Directory Domain Services allows an authorized attacker to deny service over a network...

PT-2026-112163

CVE advisory: CVE-2026-70014 - microsoft: Windows Cryptographic Services Remote Code Execution Vulnerability. https://t.co/5KDaUrMOUk CVE CyberSecurity Microsoft WindowsServer...

Microsoft Windows: CVE-2026-70229: Windows Active Directory Domain Services Remote Code Execution Vulnerability

Incorrect authorization in Active Directory Domain Services allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-78459: Microsoft Internet Information Services Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Internet Information Services allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83646: Active Directory Federation Services (AD FS) Spoofing Vulnerability

Url redirection to untrusted site 'open redirect' in Active Directory Federation Services AD FS allows an authorized attacker to perform spoofing over a network...

CVE-2026-103576: URL Redirection to Untrusted Site

Url redirection to untrusted site 'open redirect' in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-97830: Double Free

Double free in Windows Internet Information Services allows an unauthorized attacker to deny service over a network...

CVE-2026-69919: Out-of-bounds Read

Out-of-bounds read in Windows Cryptographic Services allows an authorized attacker to disclose information locally...

CVE-2026-83511: Weak Authentication

Weak authentication in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-70055: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Exposure of sensitive system information to an unauthorized control sphere in Windows Cryptographic Services allows an authorized attacker to disclose information locally...

CVE-2026-70024: Stack-based Buffer Overflow

Stack-based buffer overflow in Windows Internet Information Services allows an unauthorized attacker to execute code over a network...