Microsoft Windows: CVE-2026-70024: Windows Internet Information Services Remote Code Execution Vulnerability

Stack-based buffer overflow in Windows Internet Information Services allows an unauthorized attacker to execute code over a network...

CVE-2026-96252: Improper Verification of Cryptographic Signature

Improper verification of cryptographic signature in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-103576: URL Redirection to Untrusted Site

Url redirection to untrusted site 'open redirect' in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-83674: Weak Authentication

Weak authentication in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...

Microsoft Windows: CVE-2026-96252: Active Directory Federation Services (AD FS) Spoofing Vulnerability

Improper verification of cryptographic signature in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...

Microsoft Windows: CVE-2026-87691: Windows Management Services Elevation of Privilege Vulnerability

Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally...

PT-2026-112876

Name of the Vulnerable Software and Affected Versions Windows Management Services affected versions not specified Description A use-after-free condition in Windows Management Services allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that...

CVE-2026-83667: Out-of-bounds Read

Out-of-bounds read in Active Directory Domain Services allows an authorized attacker to deny service over a network...

CVE-2026-83648: NULL Pointer Dereference

Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network...

CVE-2026-96222: Improper Certificate Validation

Improper certificate validation in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-70014: Use After Free

Use after free in Windows Cryptographic Services allows an authorized attacker to execute code over a network...

CVE-2026-110254: Server-Side Request Forgery (SSRF)

Finsys Dockhand before 1.0.45 contains a server-side request forgery vulnerability in the ipCategory function in src/lib/server/url-safety.ts, which fails to check NAT64, 6to4, and Teredo IPv6 transition ranges. Authenticated attackers can embed loopback, cloud metadata, or private IPv4 addresses...

CVE-2026-69982: Weak Authentication

Weak authentication in Active Directory Federation Services AD FS allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-96222: Improper Certificate Validation

Improper certificate validation in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...

PT-2026-112472

Concurrent execution using shared resource with improper synchronization 'race condition' in Active Directory Certificate Services AD CS allows an authorized attacker to elevate privileges locally...

PT-2026-112457

Name of the Vulnerable Software and Affected Versions Active Directory Federation Services affected versions not specified Description An open redirect issue exists where the system allows redirection to untrusted sites. This enables an authorized attacker to perform spoofing over a network, whic...

Microsoft Windows: CVE-2026-83646: Active Directory Federation Services (AD FS) Spoofing Vulnerability

Url redirection to untrusted site 'open redirect' in Active Directory Federation Services AD FS allows an authorized attacker to perform spoofing over a network...

PT-2026-112458

Out-of-bounds read in Active Directory Domain Services allows an unauthorized attacker to deny service over a network...

PT-2026-112456

Allocation of resources without limits or throttling in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...

Microsoft Windows: CVE-2026-83645: Active Directory Federation Services (AD FS) Denial of Service Vulnerability

Allocation of resources without limits or throttling in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...