Microsoft Windows: CVE-2026-70055: Windows Cryptographic Services Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Windows Cryptographic Services allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-70014: Windows Cryptographic Services Remote Code Execution Vulnerability

Use after free in Windows Cryptographic Services allows an authorized attacker to execute code over a network...

CVE-2026-108131: Improper Certificate Validation

No cwe for this issue in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-97788: Observable Discrepancy

Observable discrepancy in Active Directory Federation Services AD FS allows an unauthorized attacker to disclose information over a network...

CVE-2026-96252: Improper Verification of Cryptographic Signature

Improper verification of cryptographic signature in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-88174: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Deployment Services allows an unauthorized attacker to execute code over a network...

CVE-2026-78459: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Internet Information Services allows an authorized attacker to elevate privileges locally...

CVE-2026-87691: Use After Free

Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally...

CVE-2026-88165: Out-of-bounds Write

Out-of-bounds write in Active Directory Domain Services allows an authorized attacker to execute code over a network...

PT-2026-111133

Name of the Vulnerable Software and Affected Versions SAP/cloud-security-services-integration-library affected versions not specified Description The HybridTokenAuthenticator component accepts tokens from unintended ambient IAS/XSUAA bindings. This allows an attacker to gain unauthorized access t...

Microsoft Windows: CVE-2026-83674: Active Directory Federation Services (AD FS) Spoofing Vulnerability

Weak authentication in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...

Microsoft Windows: CVE-2026-85795: Windows Text Services Framework Elevation of Privilege Vulnerability

Use after free in Windows Text Services Framework allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85319: Active Directory Federation Services (AD FS) Denial of Service Vulnerability

Allocation of resources without limits or throttling in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...

Microsoft Windows: CVE-2026-85324: Active Directory Federation Services (AD FS) Denial of Service Vulnerability

Memory allocation with excessive size value in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...

Microsoft Windows: CVE-2026-87691: Windows Management Services Elevation of Privilege Vulnerability

Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-70005: Active Directory Federation Services (AD FS) Security Feature Bypass Vulnerability

Weak authentication in Active Directory Federation Services AD FS allows an unauthorized attacker to bypass a security feature over a network...

PT-2026-112763

Name of the Vulnerable Software and Affected Versions Windows Text Services Framework affected versions not specified Description A use-after-free condition exists in the Windows Text Services Framework. This allows an authorized attacker to elevate privileges locally on the system. Use-after-fre...

PT-2026-112155

Name of the Vulnerable Software and Affected Versions Active Directory Federation Services affected versions not specified Description Weak authentication allows an unauthorized attacker to bypass a security feature over a network, which can lead to an impact on the system. Recommendations At the...

PT-2026-112876

Name of the Vulnerable Software and Affected Versions Windows Management Services affected versions not specified Description A use-after-free condition in Windows Management Services allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that...

PT-2026-113039

Name of the Vulnerable Software and Affected Versions System.Security.Cryptography.Xml versions 8.0.0 through 8.0.4 Description Improper certificate validation in KeyInfoX509Data allows the acceptance of serialized certificate formats containing attacker-controlled chain metadata instead of...