CVE-2026-85321: Allocation of Resources Without Limits or Throttling

Allocation of resources without limits or throttling in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...

CVE-2026-85319: Allocation of Resources Without Limits or Throttling

Allocation of resources without limits or throttling in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...

Microsoft Windows: CVE-2026-108131: Active Directory Federation Services (AD FS) Spoofing Vulnerability

No cwe for this issue in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...

Microsoft Windows: CVE-2026-96252: Active Directory Federation Services (AD FS) Spoofing Vulnerability

Improper verification of cryptographic signature in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-85324: Memory Allocation with Excessive Size Value

Memory allocation with excessive size value in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...

PT-2026-111964

Name of the Vulnerable Software and Affected Versions Active Directory Federation Services affected versions not specified Description An open redirect issue exists where the system allows redirection to untrusted sites. This flaw enables an unauthorized attacker to perform spoofing over a networ...

Windows Deployment Services Code Execution

The vulnerability of Windows Deployment Services for Windows operating systems relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Microsoft Windows: CVE-2026-85321: Active Directory Federation Services (AD FS) Denial of Service Vulnerability

Allocation of resources without limits or throttling in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...

CVE-2026-110254: Server-Side Request Forgery (SSRF)

Finsys Dockhand before 1.0.45 contains a server-side request forgery vulnerability in the ipCategory function in src/lib/server/url-safety.ts, which fails to check NAT64, 6to4, and Teredo IPv6 transition ranges. Authenticated attackers can embed loopback, cloud metadata, or private IPv4 addresses...

PT-2026-112010

Name of the Vulnerable Software and Affected Versions Active Directory Federation Services affected versions not specified Description An issue in Active Directory Federation Services allows an unauthorized attacker to perform spoofing over a network, which enables them to affect the system...

PT-2026-113258

Double free in Windows Internet Information Services allows an unauthorized attacker to deny service over a network...

PT-2026-113039

Name of the Vulnerable Software and Affected Versions System.Security.Cryptography.Xml versions 8.0.0 through 8.0.4 Description Improper certificate validation in KeyInfoX509Data allows the acceptance of serialized certificate formats containing attacker-controlled chain metadata instead of...

PT-2026-113062

Name of the Vulnerable Software and Affected Versions Active Directory Federation Services affected versions not specified Description Improper verification of cryptographic signatures allows an unauthorized attacker to perform spoofing over a network, which can affect the system. Recommendations...

PT-2026-112763

Name of the Vulnerable Software and Affected Versions Windows Text Services Framework affected versions not specified Description A use-after-free condition exists in the Windows Text Services Framework. This allows an authorized attacker to elevate privileges locally on the system. Use-after-fre...

PT-2026-112400

Heap-based buffer overflow in Windows Internet Information Services allows an authorized attacker to elevate privileges locally...

PT-2026-112458

Out-of-bounds read in Active Directory Domain Services allows an unauthorized attacker to deny service over a network...

PT-2026-112105

Name of the Vulnerable Software and Affected Versions Windows Cryptographic Services affected versions not specified Description An out-of-bounds read in Windows Cryptographic Services allows an authorized attacker to disclose sensitive information locally. Recommendations At the moment, there is...

PT-2026-112140

Name of the Vulnerable Software and Affected Versions Active Directory Federation Services affected versions not specified Description Weak authentication allows an unauthorized attacker to bypass a security feature over a network, which can lead to an impact on the system. Recommendations At the...

PT-2026-112155

Name of the Vulnerable Software and Affected Versions Active Directory Federation Services affected versions not specified Description Weak authentication allows an unauthorized attacker to bypass a security feature over a network, which can lead to an impact on the system. Recommendations At the...

PT-2026-112184

Name of the Vulnerable Software and Affected Versions Windows Cryptographic Services affected versions not specified Description Exposure of sensitive system information to an unauthorized control sphere in Windows Cryptographic Services allows an authorized attacker to disclose information...