PT-2026-112413

Name of the Vulnerable Software and Affected Versions Active Directory Federation Services affected versions not specified Description Weak authentication allows an unauthorized attacker to perform spoofing over a network, which enables them to affect the system. Recommendations At the moment,...

CVE-2026-83657: Weak Authentication

Weak authentication in Windows Modern Device Management MDM allows an authorized attacker to perform tampering locally...

CVE-2026-85376: Weak Authentication

Weak authentication in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally...

CVE-2026-83681: Weak Authentication

Weak authentication in Microsoft PowerToys allows an authorized attacker to perform tampering locally...

CVE-2026-85323: Weak Authentication

Weak authentication in Network Device Enrollment Service NDES allows an authorized attacker to perform spoofing over a network...

CVE-2026-83840: Weak Authentication

Weak authentication in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

CVE-2026-85939: Weak Authentication

Weak authentication in Windows Kernel allows an authorized attacker to bypass a security feature over a network...

CVE-2026-83674: Weak Authentication

Weak authentication in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-70005: Weak Authentication

Weak authentication in Active Directory Federation Services AD FS allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-69982: Weak Authentication

Weak authentication in Active Directory Federation Services AD FS allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-110104: Use of Password Hash With Insufficient Computational Effort

Xxyopen novel through 3.5.0 contains a weak password hashing vulnerability that allows attackers to recover plaintext passwords because UserServiceImpl.register stores unsalted MD5 digests in userinfo.password. Attackers who obtain the password column through a database leak or backup exposure ca...

CVE-2026-88101: Weak Authentication

Weak authentication in Microsoft Input Method Editor IME allows an authorized attacker to elevate privileges locally...

CVE-2026-83511: Weak Authentication

Weak authentication in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-83586: Weak Authentication

Weak authentication in Windows Resilient File System ReFS Deduplication Service allows an authorized attacker to elevate privileges locally...

CVE-2026-85328: Weak Authentication

Weak authentication in Windows Projected File System allows an authorized attacker to elevate privileges locally...

CVE-2026-69802: Weak Authentication

Weak authentication in Network Device Enrollment Service NDES allows an unauthorized attacker to execute code over a network...

CVE-2026-85922: Weak Authentication

Weak authentication in Azure Key Vault allows an unauthorized attacker to bypass a security feature over a network...

PT-2026-112856

Name of the Vulnerable Software and Affected Versions Azure Key Vault affected versions not specified Description Weak authentication allows an unauthorized attacker to bypass a security feature over a network. This authentication-bypass flaw could expose keys, certificates, and secrets used acro...

Microsoft Windows: CVE-2026-83674: Active Directory Federation Services (AD FS) Spoofing Vulnerability

Weak authentication in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...

Microsoft Windows: CVE-2026-85328: Windows Projected File System Elevation of Privilege Vulnerability

Weak authentication in Windows Projected File System allows an authorized attacker to elevate privileges locally...