52985 matches found
CVE-2026-78459
A heap-based buffer overflow vulnerability exists in Windows Internet Information Services . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability has a CVSS 3.1 score of 7.8 (High) . Official remediation is available via Microsoft's update guide.
EUVD-2026-99853
Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network...
EUVD-2026-99860
Exposure of sensitive system information to an unauthorized control sphere in Windows Cryptographic Services allows an authorized attacker to disclose information locally...
CVE-2026-70055
A vulnerability in Windows Cryptographic Services allows an authorized attacker to perform a local information disclosure . The flaw results in the exposure of sensitive system information to an unauthorized control sphere. This vulnerability is associated with CWE-497 . While a specific root cau...
CVE-2026-69992
A Use after free vulnerability exists in Windows Remote Desktop Services , which could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a High severity rating with a CVSS 3.1 score of 7.5 . While the documents do not specify the exact file or f...
EUVD-2026-99750
Improper certificate validation in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-96222
Improper certificate validation in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-96222
A vulnerability in Active Directory Federation Services (AD FS) stems from improper certificate validation . This flaw allows an unauthorized attacker to perform spoofing over a network. The vulnerability has a base severity of 7.4 (High) according to the CVSS 3.1 metric provided. No specific exp...
CVE-2026-96222
Improper certificate validation in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...
EUVD-2026-99671
Stack-based buffer overflow in Windows Internet Information Services allows an unauthorized attacker to execute code over a network...
CVE-2026-70024
A stack-based buffer overflow exists in Windows Internet Information Services (IIS), which could allow an unauthorized attacker to execute arbitrary code over a network. The vulnerability is characterized by improper input validation (CWE-20) and has a CRITICAL severity score of 9.80. This flaw a...
EUVD-2026-99667
Weak authentication in Active Directory Federation Services AD FS allows an unauthorized attacker to bypass a security feature over a network...
EUVD-2026-99668
Weak authentication in Active Directory Federation Services AD FS allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-70005
Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to bypass a security feature over a network. This vulnerability is associated with CWE-1390 (Weak Authentication). While the base CVSS score is 5.9 (Medium) , the attack complexity is high. No spec...
CVE-2026-69982
A weak authentication vulnerability in Active Directory Federation Services (AD FS) allows an unauthorized attacker to bypass a security feature over a network. The vulnerability is associated with CWE-1390 . While the base severity score is 5.9 (Medium) , the impact is primarily on integrity (Hi...
EUVD-2026-99637
Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally...
CVE-2026-87691
A Use after free vulnerability exists in Windows Management Services . This flaw allows an authorized attacker to achieve local privilege escalation . No specific software versions, root cause files, or remediation steps are provided in the documents. No exploits or in-the-wild exploitation detai...
EUVD-2026-99618
Weak authentication in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-83674
A weak authentication vulnerability exists in Active Directory Federation Services (AD FS) , which may allow an unauthorized attacker to perform spoofing over a network. The vulnerability is classified with a HIGH severity base score of 8.1. No specific component-level details, exploit links, or ...