Windows Deployment Services Code Execution

The vulnerability of Windows Deployment Services for Windows operating systems relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

CVE-2026-55376: Improper Neutralization of Special Elements used in an OS Command

Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to 0.0.40, an authenticated user who can create or edit a workflow with an Agent custom Python tool can bypass the blacklist-based sandbox in backend/app/services/pythontoolexecutor.py becau...

PT-2026-112459

Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network...

PT-2026-112456

Allocation of resources without limits or throttling in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...

PT-2026-112413

Name of the Vulnerable Software and Affected Versions Active Directory Federation Services affected versions not specified Description Weak authentication allows an unauthorized attacker to perform spoofing over a network, which enables them to affect the system. Recommendations At the moment,...

PT-2026-112974

Name of the Vulnerable Software and Affected Versions Active Directory Domain Services affected versions not specified Description An out-of-bounds write exists in Active Directory Domain Services, which allows an authorized attacker to execute arbitrary code over a network and affect the system...

PT-2026-112714

Allocation of resources without limits or throttling in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...

PT-2026-112320

Name of the Vulnerable Software and Affected Versions Windows Active Directory Domain Services versions prior to 14393.9612 for Windows Server 2016 Windows Active Directory Domain Services versions prior to 17763.9376 for Windows Server 2019 Windows Active Directory Domain Services versions prior...

PT-2026-112168

Name of the Vulnerable Software and Affected Versions Windows Internet Information Services affected versions not specified Description A stack-based buffer overflow occurs in Windows Internet Information Services, which allows an unauthorized remote attacker to execute arbitrary code over a...

Microsoft Windows: CVE-2026-69919: Windows Cryptographic Services Information Disclosure Vulnerability

Out-of-bounds read in Windows Cryptographic Services allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-83645: Active Directory Federation Services (AD FS) Denial of Service Vulnerability

Allocation of resources without limits or throttling in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...

Microsoft Windows: CVE-2026-69992: Remote Desktop Services Remote Code Execution Vulnerability

Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-83648: Windows Active Directory Domain Services Denial of Service Vulnerability

Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network...

CVE-2026-83647: Out-of-bounds Read

Out-of-bounds read in Active Directory Domain Services allows an unauthorized attacker to deny service over a network...

CVE-2026-69992: Use After Free

Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network...

CVE-2026-70005: Weak Authentication

Weak authentication in Active Directory Federation Services AD FS allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-85795: Use After Free

Use after free in Windows Text Services Framework allows an authorized attacker to elevate privileges locally...

CVE-2026-83648: NULL Pointer Dereference

Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network...

PT-2026-116235

Уязвимость службы удаленного рабочего стола Remote Desktop Services RDS операционных систем Windows связана с использованием памяти после освобождения. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код...

CVE-2026-89105: Initialization of a Resource with an Insecure Default

The HybridTokenAuthenticator component of the SAP/cloud-security-services-integration-library accepts tokens from unintended ambient IAS/XSUAA bindings, potentially allowing unauthorized access. This vulnerability allows an attacker to gain unauthorized access to the system by using tokens that...