CVE-2026-88165

An out-of-bounds write vulnerability exists in Active Directory Domain Services . This flaw allows an authorized attacker to achieve remote code execution over a network. While the vulnerability is confirmed with a HIGH base severity score (8.8), the provided documents do not specify the exact so...

EUVD-2026-99507

Use after free in Windows Text Services Framework allows an authorized attacker to elevate privileges locally...

CVE-2026-85795

A Use after free vulnerability exists in the Windows Text Services Framework . This flaw allows an authorized attacker to achieve local privilege elevation . No specific technical root cause, affected versions, or exploit links are provided in the documentation; however, an official fix is noted ...

EUVD-2026-99464

Memory allocation with excessive size value in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...

CVE-2026-85319

A vulnerability in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform a Denial of Service (DoS) over a network. This is caused by the allocation of resources without limits or throttling (CWE-770). The impact is a high-severity loss of availability. An officia...

CVE-2026-85324

A Denial of Service (DoS) vulnerability exists in Active Directory Federation Services (AD FS) due to memory allocation with excessive size value (CWE-789). An unauthorized attacker can exploit this flaw over a network to disrupt service availability. The CVSS 3.1 score is 7.5 (High) , indicating...

CVE-2026-85321

A vulnerability in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform a Denial of Service (DoS) attack over a network. The root cause is the allocation of resources without limits or throttling (CWE-770). This flaw can lead to high availability impact. Remedia...

EUVD-2026-99460

Allocation of resources without limits or throttling in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...

EUVD-2026-99461

Allocation of resources without limits or throttling in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...

EUVD-2026-99321

Out-of-bounds read in Active Directory Domain Services allows an authorized attacker to deny service over a network...

CVE-2026-83667

An out-of-bounds read vulnerability exists in Active Directory Domain Services . This flaw allows an authorized attacker to perform a denial of service over a network. While the root cause is identified as an out-of-bounds read, specific internal file paths or functions are not detailed in the pr...

EUVD-2026-99312

Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network...

CVE-2026-83666

A race condition vulnerability exists in Active Directory Certificate Services (AD CS) due to concurrent execution using a shared resource with improper synchronization. This flaw allows an authorized attacker to perform a local privilege elevation . No specific version numbers or remediation ste...

EUVD-2026-99311

Url redirection to untrusted site 'open redirect' in Active Directory Federation Services AD FS allows an authorized attacker to perform spoofing over a network...

EUVD-2026-99320

Concurrent execution using shared resource with improper synchronization 'race condition' in Active Directory Certificate Services AD CS allows an authorized attacker to elevate privileges locally...

CVE-2026-83646

A URL redirection to an untrusted site (open redirect ) vulnerability exists in Active Directory Federation Services (AD FS) . This flaw allows an authorized attacker to perform spoofing over a network. The vulnerability is categorized under CWE-601 and has a Medium base severity score of 4.8. No...

CVE-2026-83648

A null pointer dereference vulnerability exists in Active Directory Domain Services . This flaw allows an authorized attacker to trigger a denial of service (DoS) over the network. The vulnerability is categorized under CWE-476 . No specific exploit code or information regarding in-the-wild explo...

EUVD-2026-99132

Use after free in Windows Cryptographic Services allows an authorized attacker to execute code over a network...

CVE-2026-70014

A Use after free vulnerability in Windows Cryptographic Services allows an authorized attacker to execute code over a network. The vulnerability results in Remote Code Execution (RCE) and is characterized by a high base severity score. Specific details regarding the impacted component or file are...

EUVD-2026-99024

Lancet through 2.3.9 contains an SSRF protection bypass vulnerability in netutil.IsInternalIP that misclassifies IPv6 private, link-local, CGNAT and transition addresses as external. Attackers can supply hostnames resolving to these address forms, including NAT64, 6to4 or Teredo embedding interna...