52985 matches found
CVE-2026-97830
A double free vulnerability in Windows Internet Information Services allows an unauthorized attacker to perform a denial of service over a network. The vulnerability is associated with CWE-415 and has a CVSS 3.1 base score of 7.5 (High). No specific exploit information or direct remediation steps...
EUVD-2026-100389
Url redirection to untrusted site 'open redirect' in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-103576
A URL redirection to an untrusted site (open redirect ) vulnerability exists in Active Directory Federation Services (AD FS) . This flaw allows an unauthorized attacker to perform spoofing over a network. The vulnerability is associated with CWE-601 . While a base score of 6.5 is assigned, the do...
EUVD-2026-100308
Observable discrepancy in Active Directory Federation Services AD FS allows an unauthorized attacker to disclose information over a network...
CVE-2026-97788
An observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attacker to disclose information over a network. The vulnerability is classified as a High severity issue with a CVSS score of 7.5. The provided documents do not specify the exact root cause, affected...
CVE-2026-96252
The Active Directory Federation Services (AD FS) component is vulnerable to an improper verification of cryptographic signature . This flaw allows an unauthorized attacker to perform spoofing over a network, effectively enabling them to act as another user . The vulnerability has a CVSS 3.1 score...
EUVD-2026-100218
Improper verification of cryptographic signature in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...
EUVD-2026-100161
Out-of-bounds read in Windows Cryptographic Services allows an authorized attacker to disclose information locally...
CVE-2026-69919
An out-of-bounds read vulnerability exists in Windows Cryptographic Services . This flaw allows an authorized attacker to perform a local attack to disclose information . The vulnerability is associated with CWE-125 . No specific exploit details or remediation instructions are provided in the doc...
EUVD-2026-100132
Incorrect authorization in Active Directory Domain Services allows an unauthorized attacker to execute code over a network...
CVE-2026-70229
A vulnerability in Active Directory Domain Services involves incorrect authorization , which allows an unauthorized attacker to perform remote code execution over a network. The vulnerability is assigned CWE-863 and has a High base severity score of 8.1. No specific version numbers, root cause te...
EUVD-2026-100104
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Deployment Services allows an unauthorized attacker to execute code over a network...
CVE-2026-88174
A race condition exists in Windows Deployment Services due to improper synchronization during concurrent execution using a shared resource. This vulnerability allows an unauthorized attacker to achieve remote code execution over the network. No specific exploit details or official patch versions ...
CVE-2026-83647
An out-of-bounds read vulnerability exists in Active Directory Domain Services . This flaw allows an unauthorized attacker to perform a denial of service (DoS) attack over a network. The vulnerability is categorized under CWE-125 . Official remediation is available via Microsoft, but specific pat...
CVE-2026-83645
A Denial of Service (DoS) vulnerability exists in Active Directory Federation Services (AD FS) due to the allocation of resources without limits or throttling (CWE-770). An unauthorized attacker can exploit this over a network to disrupt services. No specific affected versions, exploit links, or ...
EUVD-2026-99935
Out-of-bounds read in Active Directory Domain Services allows an unauthorized attacker to deny service over a network...
EUVD-2026-99934
Allocation of resources without limits or throttling in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...
CVE-2026-83511
A weak authentication vulnerability in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network. The vulnerability is associated with CWE-1390 . According to the provided metrics, the issue has a High base severity score of 7.4. Specific deta...