CVE-2026-70024: Stack-based Buffer Overflow

Stack-based buffer overflow in Windows Internet Information Services allows an unauthorized attacker to execute code over a network...

PT-2026-112010

Name of the Vulnerable Software and Affected Versions Active Directory Federation Services affected versions not specified Description An issue in Active Directory Federation Services allows an unauthorized attacker to perform spoofing over a network, which enables them to affect the system...

PT-2026-112036

Finsys Dockhand before 1.0.45 contains a server-side request forgery vulnerability in the ipCategory function in src/lib/server/url-safety.ts, which fails to check NAT64, 6to4, and Teredo IPv6 transition ranges. Authenticated attackers can embed loopback, cloud metadata, or private IPv4 addresses...

PT-2026-112974

Name of the Vulnerable Software and Affected Versions Active Directory Domain Services affected versions not specified Description An out-of-bounds write exists in Active Directory Domain Services, which allows an authorized attacker to execute arbitrary code over a network and affect the system...

PT-2026-112982

Name of the Vulnerable Software and Affected Versions Windows Deployment Services affected versions not specified Description An improper synchronization issue, known as a race condition, occurs during concurrent execution using a shared resource. This allows an unauthorized attacker to execute...

PT-2026-113062

Name of the Vulnerable Software and Affected Versions Active Directory Federation Services affected versions not specified Description Improper verification of cryptographic signatures allows an unauthorized attacker to perform spoofing over a network, which can affect the system. Recommendations...

PT-2026-112459

Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network...

PT-2026-112473

Out-of-bounds read in Active Directory Domain Services allows an authorized attacker to deny service over a network...

PT-2026-112147

Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network...

Microsoft .NET Framework: CVE-2026-97788: Active Directory Federation Services (AD FS) Information Disclosure Vulnerability

Observable discrepancy in Active Directory Federation Services AD FS allows an unauthorized attacker to disclose information over a network...

Microsoft Windows: CVE-2026-88174: Windows Deployment Services Remote Code Execution Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Deployment Services allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-69992: Remote Desktop Services Remote Code Execution Vulnerability

Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-69982: Active Directory Federation Services (AD FS) Security Feature Bypass Vulnerability

Weak authentication in Active Directory Federation Services AD FS allows an unauthorized attacker to bypass a security feature over a network...

Microsoft Windows: CVE-2026-88165: Windows Active Directory Domain Services Remote Code Execution Vulnerability

Out-of-bounds write in Active Directory Domain Services allows an authorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-83667: Windows Active Directory Domain Services Denial of Service Vulnerability

Out-of-bounds read in Active Directory Domain Services allows an authorized attacker to deny service over a network...

PT-2026-111964

Name of the Vulnerable Software and Affected Versions Active Directory Federation Services affected versions not specified Description An open redirect issue exists where the system allows redirection to untrusted sites. This flaw enables an unauthorized attacker to perform spoofing over a networ...

Microsoft Windows: CVE-2026-103576: Active Directory Federation Services (AD FS) Spoofing Vulnerability

Url redirection to untrusted site 'open redirect' in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...

PT-2026-113222

Observable discrepancy in Active Directory Federation Services AD FS allows an unauthorized attacker to disclose information over a network...

Microsoft Windows: CVE-2026-108131: Active Directory Federation Services (AD FS) Spoofing Vulnerability

No cwe for this issue in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...

PT-2026-112320

Name of the Vulnerable Software and Affected Versions Windows Active Directory Domain Services versions prior to 14393.9612 for Windows Server 2016 Windows Active Directory Domain Services versions prior to 17763.9376 for Windows Server 2019 Windows Active Directory Domain Services versions prior...