34842 matches found
CVE-2026-69624: Incomplete List of Disallowed Inputs
Incomplete list of disallowed inputs in Active Directory Certificate Services AD CS allows an authorized attacker to perform tampering over a network...
CVE-2026-69395: Use of Externally-Controlled Format String
Use of externally-controlled format string in Active Directory Certificate Services AD CS allows an authorized attacker to disclose information over a network...
CVE-2026-58611: Improper Authorization
Improper authorization in XBox Gaming Services allows an authorized attacker to elevate privileges locally...
CVE-2026-69607: Use After Free
Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network...
CVE-2026-69599: Use After Free
Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network...
PT-2026-87540
Name of the Vulnerable Software and Affected Versions Windows Remote Desktop Services affected versions not specified Description A use-after-free condition exists in Windows Remote Desktop Services. This occurs when a program continues to use a pointer after it has been freed, which can be...
CVE-2026-62762: NULL Pointer Dereference
Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network...
PT-2026-87556
Name of the Vulnerable Software and Affected Versions Active Directory Domain Services affected versions not specified Description A use after free issue in Active Directory Domain Services allows an unauthorized attacker to execute arbitrary code over a network, which can affect the system. Use...
PT-2026-87212
Name of the Vulnerable Software and Affected Versions Active Directory Domain Services affected versions not specified Description A use after free condition in Active Directory Domain Services allows an authorized attacker to execute arbitrary code over a network, which can affect the system. Us...
PT-2026-88318
In the current development version of Eclipse aeriOS, for which no official release has yet been published, the Identity Manager IdM deployment included insecure default configurations and credentials for security-sensitive services. The Helm chart exposed the Keycloak service and its PostgreSQL...
CVE-2026-69287: Use After Free
Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally...
CVE-2026-69475: Untrusted Pointer Dereference
Untrusted pointer dereference in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally...
CVE-2026-72978: Allocation of Resources Without Limits or Throttling
Allocation of resources without limits or throttling in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...
CVE-2026-69539: Use After Free
Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network...
CVE-2026-69514: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to execute code over a network...
CVE-2026-73315: Server-Side Request Forgery (SSRF)
XenForo before 2.3.13 contains a server-side request forgery vulnerability in the PayPal REST webhook handler that allows unauthenticated attackers to cause the server to make outbound HTTP requests to arbitrary destinations by supplying a crafted certificate URL in webhook headers without scheme...
CVE-2026-72943: Use After Free
Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network...
CVE-2026-73024: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Services for NFS ONCRPC XDR Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-71330: Exposure of Sensitive System Information to an Unauthorized Control Sphere
Exposure of sensitive system information to an unauthorized control sphere in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to disclose information over a network...