Microsoft Windows: CVE-2026-69919: Windows Cryptographic Services Information Disclosure Vulnerability

Out-of-bounds read in Windows Cryptographic Services allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-83645: Active Directory Federation Services (AD FS) Denial of Service Vulnerability

Allocation of resources without limits or throttling in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...

Microsoft Windows: CVE-2026-69992: Remote Desktop Services Remote Code Execution Vulnerability

Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network...

CVE-2026-83647: Out-of-bounds Read

Out-of-bounds read in Active Directory Domain Services allows an unauthorized attacker to deny service over a network...

CVE-2026-69992: Use After Free

Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network...

CVE-2026-85795: Use After Free

Use after free in Windows Text Services Framework allows an authorized attacker to elevate privileges locally...

CVE-2026-83648: NULL Pointer Dereference

Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network...

CVE-2026-89105: Initialization of a Resource with an Insecure Default

The HybridTokenAuthenticator component of the SAP/cloud-security-services-integration-library accepts tokens from unintended ambient IAS/XSUAA bindings, potentially allowing unauthorized access. This vulnerability allows an attacker to gain unauthorized access to the system by using tokens that...

CVE-2026-85321: Allocation of Resources Without Limits or Throttling

Allocation of resources without limits or throttling in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...

Microsoft Windows: CVE-2026-96252: Active Directory Federation Services (AD FS) Spoofing Vulnerability

Improper verification of cryptographic signature in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...

PT-2026-112168

Name of the Vulnerable Software and Affected Versions Windows Internet Information Services affected versions not specified Description A stack-based buffer overflow occurs in Windows Internet Information Services, which allows an unauthorized remote attacker to execute arbitrary code over a...

PT-2026-112320

Name of the Vulnerable Software and Affected Versions Windows Active Directory Domain Services versions prior to 14393.9612 for Windows Server 2016 Windows Active Directory Domain Services versions prior to 17763.9376 for Windows Server 2019 Windows Active Directory Domain Services versions prior...

Microsoft Windows: CVE-2026-108131: Active Directory Federation Services (AD FS) Spoofing Vulnerability

No cwe for this issue in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-110254: Server-Side Request Forgery (SSRF)

Finsys Dockhand before 1.0.45 contains a server-side request forgery vulnerability in the ipCategory function in src/lib/server/url-safety.ts, which fails to check NAT64, 6to4, and Teredo IPv6 transition ranges. Authenticated attackers can embed loopback, cloud metadata, or private IPv4 addresses...

CVE-2026-85319: Allocation of Resources Without Limits or Throttling

Allocation of resources without limits or throttling in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...

PT-2026-112974

Name of the Vulnerable Software and Affected Versions Active Directory Domain Services affected versions not specified Description An out-of-bounds write exists in Active Directory Domain Services, which allows an authorized attacker to execute arbitrary code over a network and affect the system...

CVE-2026-85324: Memory Allocation with Excessive Size Value

Memory allocation with excessive size value in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...

Microsoft Windows: CVE-2026-85321: Active Directory Federation Services (AD FS) Denial of Service Vulnerability

Allocation of resources without limits or throttling in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...

CVE-2026-70005: Weak Authentication

Weak authentication in Active Directory Federation Services AD FS allows an unauthorized attacker to bypass a security feature over a network...

PT-2026-111964

Name of the Vulnerable Software and Affected Versions Active Directory Federation Services affected versions not specified Description An open redirect issue exists where the system allows redirection to untrusted sites. This flaw enables an unauthorized attacker to perform spoofing over a networ...