52985 matches found
Windows Cryptographic Services Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows Cryptographic Services allows an authorized attacker to disclose information locally...
Active Directory Federation Services (AD FS) Security Feature Bypass Vulnerability
Weak authentication in Active Directory Federation Services AD FS allows an unauthorized attacker to bypass a security feature over a network...
Active Directory Federation Services (AD FS) Security Feature Bypass Vulnerability
Weak authentication in Active Directory Federation Services AD FS allows an unauthorized attacker to bypass a security feature over a network...
Windows Active Directory Domain Services Denial of Service Vulnerability
Out-of-bounds read in Active Directory Domain Services allows an unauthorized attacker to deny service over a network...
Remote Desktop Services Remote Code Execution Vulnerability
Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network...
Windows Cryptographic Services Remote Code Execution Vulnerability
Use after free in Windows Cryptographic Services allows an authorized attacker to execute code over a network...
Active Directory Federation Services (AD FS) Spoofing Vulnerability
Weak authentication in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...
Windows Management Services Elevation of Privilege Vulnerability
Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally...
Windows Internet Information Services Remote Code Execution Vulnerability
Stack-based buffer overflow in Windows Internet Information Services allows an unauthorized attacker to execute code over a network...
Windows Internet Information Services Denial of Service Vulnerability
Double free in Windows Internet Information Services allows an unauthorized attacker to deny service over a network...
Active Directory Federation Services (AD FS) Spoofing Vulnerability
No cwe for this issue in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...
Active Directory Federation Services (AD FS) Spoofing Vulnerability
Improper verification of cryptographic signature in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...
Active Directory Federation Services (AD FS) Information Disclosure Vulnerability
Observable discrepancy in Active Directory Federation Services AD FS allows an unauthorized attacker to disclose information over a network...
Active Directory Federation Services (AD FS) Spoofing Vulnerability
Url redirection to untrusted site 'open redirect' in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...
Windows Active Directory Domain Services Remote Code Execution Vulnerability
Incorrect authorization in Active Directory Domain Services allows an unauthorized attacker to execute code over a network...
Windows Deployment Services Remote Code Execution Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Deployment Services allows an unauthorized attacker to execute code over a network...
CVE-2026-103418 Universal XSS via the HTML language attribute in Translation Services
Firefox for iOS directly interpolated the page’s HTML language attribute into translation JavaScript, allowing attacker-controlled markup to execute code in Firefox’s privileged content world and bypass the page’s Content Security Policy. This vulnerability was fixed in Firefox for iOS 157.1...
CVE-2026-103418
Firefox for iOS is vulnerable to a Universal XSS flaw because the browser directly interpolates the page’s HTML language attribute into translation JavaScript. This allows an attacker to execute code within the browser's privileged content world and bypass the page’s Content Security Policy . Thi...
CVE-2026-103418 Universal XSS via the HTML language attribute in Translation Services
Firefox for iOS directly interpolated the page’s HTML language attribute into translation JavaScript, allowing attacker-controlled markup to execute code in Firefox’s privileged content world and bypass the page’s Content Security Policy. This vulnerability was fixed in Firefox for iOS 157.1...
CVE-2026-89105
The HybridTokenAuthenticator component of the SAP/cloud-security-services-integration-library accepts tokens from unintended ambient IAS/XSUAA bindings, potentially allowing unauthorized access. This vulnerability allows an attacker to gain unauthorized access to the system by using tokens that...