29336 matches found
CVE-2026-50359 Microsoft XML Core Services Elevation of Privilege Vulnerability
...
CVE-2026-54121 Active Directory Certificate Services Elevation of Privilege Vulnerability
...
CVE-2026-54121
CVE-2026-54121 affects Active Directory Certificate Services (AD CS). Root cause: improper authorization allowing an authorized attacker to elevate privileges over the network. Impact: elevation of privilege with high CVSS (8.8) per Microsoft-assigned metrics. Remediation: Microsoft has released ...
CVE-2026-54121 Active Directory Certificate Services Elevation of Privilege Vulnerability
...
CVE-2026-50684
CVE-2026-50684 (AD FS spoofing) : The vulnerability is described as improper neutralization of input during web page generation (XSS) in Active Directory Federation Services, enabling an authorized attacker to perform spoofing over the network. The CVSS v3.1 base metrics indicate a Medium severit...
CVE-2026-50647
Loop with unreachable exit condition 'infinite loop' in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...
CVE-2026-50647 Active Directory Federation Server Denial of Service Vulnerability
...
CVE-2026-50444
CVE-2026-50444 is a Windows Server Update Services (WSUS) Elevation of Privilege vulnerability caused by Missing authentication for a critical function. An authorized attacker could elevate privileges over the network. Public details are supported by multiple sources (MSRC update guide, NCSC advi...
CVE-2026-50411 Windows Active Directory Federation Services Denial of Service Vulnerability
...
CVE-2026-50411
CVE-2026-50411 affects Active Directory Federation Services (AD FS) and is described as a stack-based buffer overflow that enables a remote attacker to cause a denial of service over the network. Public references in the connected documents confirm the DoS impact and Microsoft has released update...
CVE-2026-50411
Stack-based buffer overflow in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...
CVE-2026-50411 Windows Active Directory Federation Services Denial of Service Vulnerability
...
CVE-2026-50369 Windows Remote Desktop Services Elevation of Privilege Vulnerability
...
CVE-2026-50369 Windows Remote Desktop Services Elevation of Privilege Vulnerability
...
CVE-2026-50369
CVE-2026-50369 is a Windows Remote Desktop Services vulnerability identified as a use-after-free that enables an authorized attacker to elevate privileges over the network. The initial entry and multiple connected sources describe the issue consistently and confirm the affected component as Windo...
CVE-2026-50352 Windows Cryptographic Services Information Disclosure Vulnerability
...
CVE-2026-50352
CVE-2026-50352 affects Windows Cryptographic Services. Description: Exposure of sensitive information to an unauthorized actor allows a locally authenticated attacker to disclose information. Impact: information disclosure (CONFIDENTIALITY) with LOCAL attack vector; CVSS 3.1 base 5.5 (AV:L/AC:L/P...
CVE-2026-50352 Windows Cryptographic Services Information Disclosure Vulnerability
...
CVE-2026-50355
CVE-2026-50355 is a vulnerability in Active Directory Federation Services (AD FS) described as a stack-based buffer overflow that enables a remote, unauthenticated attacker to cause a denial of service over the network. The CVSS v3.1 base score is 7.5 (Network, Low attack complexity, No privilege...