CVE-2026-83646: URL Redirection to Untrusted Site

Url redirection to untrusted site 'open redirect' in Active Directory Federation Services AD FS allows an authorized attacker to perform spoofing over a network...

CVE-2026-70014: Use After Free

Use after free in Windows Cryptographic Services allows an authorized attacker to execute code over a network...

CVE-2026-96222: Improper Certificate Validation

Improper certificate validation in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...

PT-2026-112147

Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network...

PT-2026-112472

Concurrent execution using shared resource with improper synchronization 'race condition' in Active Directory Certificate Services AD CS allows an authorized attacker to elevate privileges locally...

CVE-2026-70229: Incorrect Authorization

Incorrect authorization in Active Directory Domain Services allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-83667: Windows Active Directory Domain Services Denial of Service Vulnerability

Out-of-bounds read in Active Directory Domain Services allows an authorized attacker to deny service over a network...

Microsoft Windows: CVE-2026-69982: Active Directory Federation Services (AD FS) Security Feature Bypass Vulnerability

Weak authentication in Active Directory Federation Services AD FS allows an unauthorized attacker to bypass a security feature over a network...

Microsoft Windows: CVE-2026-88165: Windows Active Directory Domain Services Remote Code Execution Vulnerability

Out-of-bounds write in Active Directory Domain Services allows an authorized attacker to execute code over a network...

PT-2026-112473

Out-of-bounds read in Active Directory Domain Services allows an authorized attacker to deny service over a network...

PT-2026-112479

Name of the Vulnerable Software and Affected Versions Active Directory Federation Services affected versions not specified Description Weak authentication allows an unauthorized attacker to perform spoofing over a network, which enables them to affect the system. Recommendations At the moment,...

PT-2026-112163

CVE advisory: CVE-2026-70014 - microsoft: Windows Cryptographic Services Remote Code Execution Vulnerability. https://t.co/5KDaUrMOUk CVE CyberSecurity Microsoft WindowsServer...

PT-2026-112413

Name of the Vulnerable Software and Affected Versions Active Directory Federation Services affected versions not specified Description Weak authentication allows an unauthorized attacker to perform spoofing over a network, which enables them to affect the system. Recommendations At the moment,...

Microsoft Windows: CVE-2026-83666: Active Directory Certificate Services (AD CS) Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Active Directory Certificate Services AD CS allows an authorized attacker to elevate privileges locally...

CVE-2026-96222: Improper Certificate Validation

Improper certificate validation in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...

Microsoft Windows: CVE-2026-103576: Active Directory Federation Services (AD FS) Spoofing Vulnerability

Url redirection to untrusted site 'open redirect' in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-83645: Allocation of Resources Without Limits or Throttling

Allocation of resources without limits or throttling in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...

PT-2026-113222

Observable discrepancy in Active Directory Federation Services AD FS allows an unauthorized attacker to disclose information over a network...

PT-2026-112457

Name of the Vulnerable Software and Affected Versions Active Directory Federation Services affected versions not specified Description An open redirect issue exists where the system allows redirection to untrusted sites. This enables an authorized attacker to perform spoofing over a network, whic...

PT-2026-112036

Finsys Dockhand before 1.0.45 contains a server-side request forgery vulnerability in the ipCategory function in src/lib/server/url-safety.ts, which fails to check NAT64, 6to4, and Teredo IPv6 transition ranges. Authenticated attackers can embed loopback, cloud metadata, or private IPv4 addresses...