CVE-2026-57976: NULL Pointer Dereference

Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network...

Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability

Microsoft Active Directory Federation Services contains an insufficient granularity of access control vulnerability that allows an authorized attacker to elevate privileges locally...

CVE-2026-50647: Loop with Unreachable Exit Condition

Loop with unreachable exit condition 'infinite loop' in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...

CVE-2026-50411: Stack-based Buffer Overflow

Stack-based buffer overflow in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...

CVE-2026-50369: Use After Free

Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network...

PT-2026-58040

A security issue exists within FactoryTalk® Services Platform FTSP, allowing an attacker to bypass JWT signature validation during Okta Web Authentication. The vulnerability stems from the application not verifying that the JWT algorithm is configured for RSA, enabling an attacker to set the...

PT-2026-58504

Name of the Vulnerable Software and Affected Versions Active Directory Federation Services affected versions not specified Description Improper neutralization of input during web page generation leads to cross-site scripting, which allows an authorized attacker to perform spoofing over a network...

PT-2026-58501

Name of the Vulnerable Software and Affected Versions Windows Cryptographic Services affected versions not specified Description An issue in Windows Cryptographic Services allows an authorized attacker to locally disclose sensitive information to an unauthorized actor. Recommendations At the...

PT-2026-58657

Name of the Vulnerable Software and Affected Versions Windows Management Services affected versions not specified Description A use-after-free condition in Windows Management Services allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that...

PT-2026-58342

Use after free in Microsoft XML Core Services allows an authorized attacker to elevate privileges locally...

PT-2026-58351

Name of the Vulnerable Software and Affected Versions Windows Remote Desktop Services affected versions not specified Description A use after free condition in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network. Use after free is a memory corruption...

PT-2026-58337

Name of the Vulnerable Software and Affected Versions Windows Cryptographic Services affected versions not specified Description An issue in Windows Cryptographic Services allows an authorized attacker with local access to disclose sensitive information. Recommendations At the moment, there is no...

CVE-2026-50681: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of sensitive information to an unauthorized actor in Windows Cryptographic Services allows an authorized attacker to disclose information locally...

CVE-2026-54983: Stack-based Buffer Overflow

Stack-based buffer overflow in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...

PT-2026-58514

Name of the Vulnerable Software and Affected Versions Active Directory Certificate Services affected versions not specified Description Improper authorization allows an authorized attacker to elevate privileges over a network, enabling them to affect the system. Recommendations At the moment, the...

CVE-2026-58529: Out-of-bounds Read

Out-of-bounds read in Active Directory Federation Services AD FS allows an authorized attacker to disclose information over a network...

CVE-2026-58626: Use After Free

Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network...

PT-2026-58350

Name of the Vulnerable Software and Affected Versions Active Directory Federation Services affected versions not specified Description A stack-based buffer overflow occurs when a program writes more data to a buffer located on the stack than the buffer is allocated to hold. This issue allows an...

CVE-2026-50366: NULL Pointer Dereference

Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network...

PT-2026-58390

Name of the Vulnerable Software and Affected Versions Active Directory Federation Services affected versions not specified Description A stack-based buffer overflow exists in Active Directory Federation Services AD FS, which allows an unauthenticated attacker to remotely trigger a denial of servi...