Vulnerabilities
All
My stack
Known exploited
Public exploit
Critical (9+)
Likely exploited (EPSS ≥ 50%)
Changed, 24 h
New, 24 h
Sort:
risk
modified
published
CVSS
EPSS
| CVE | CVSS | EPSS | Vendor, product | Description | Modified |
|---|---|---|---|---|---|
| CVE-2025-10230exploit ×3 | 10.0 critical | 40.0% | no CPE yet | A flaw was found in Samba, in the front-end WINS hook handling: NetBIOS names from registration packets are passed to a shell without proper validation or escaping. Unsanitized NetBIOS name data from WINS registration packets are inserted into a shell command and executed by the Samba Active Directory Domain Controller’s wins hook, allowing an unauthenticated network attacker to achieve remote command execution as the Samba process. | 18 Oct |
| CVE-2026-54121exploit ×17 | 8.8 high | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows server 2012 | Improper authorization in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges over a network. | 16 h ago |
| CVE-2026-49179exploit | 8.8 high | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Improper neutralization of special elements used in a command ('command injection') in Windows Active Directory allows an unauthorized attacker to execute code over a network. | Sat 24 Oct |
| CVE-2026-106126 | 9.4 critical | 2.0% | no CPE yet | A command injection vulnerability in the Active Directory Events Listener of Tenable Identity Exposure (SaaS) allows an authenticated, low-privileged attacker to execute arbitrary commands as SYSTEM on the PDCe. | 8 Oct |
| CVE-2026-50652 | 7.5 high | 2.0% | microsoft, azure active directory, microsoft .net framework 3.5, microsoft .net framework 3.5 and 4.7.2 | Deserialization of untrusted data in Azure Active Directory allows an unauthorized attacker to deny service over a network. | 16 h ago |
| CVE-2026-45480 | 10.0 critical | 1.0% | microsoft, azure_active_directory | Improper authentication in Azure Active Directory allows an unauthorized attacker to elevate privileges over a network. | Sun 25 Oct |
| CVE-2026-83711 | 10.0 critical | 1.0% | microsoft, azure_active_directory_b2c | Authorization bypass through user-controlled key in Microsoft Azure Active Directory B2C allows an unauthorized attacker to elevate privileges over a network. | 14 Oct |
| CVE-2026-50481 | 9.9 critical | 1.0% | microsoft, azure_active_directory | Modification of assumed-immutable data (maid) in Azure Active Directory allows an authorized attacker to elevate privileges over a network. | Sat 24 Oct |
| CVE-2026-69851 | 9.9 critical | 1.0% | microsoft, entra_id | Server-side request forgery (ssrf) in Azure Active Directory allows an authorized attacker to elevate privileges over a network. | 18 Oct |
| CVE-2026-54733 | 9.3 critical | 1.0% | no CPE yet | The Microsoft 365 and Microsoft Entra ID Plugins for Moodle provide Office 365 and Azure Active Directory integration for Moodle. Prior to 4.5.6, 5.0.5, and 5.1.1, the Microsoft Office 365 Integration plugin local_o365 Teams SSO endpoint sso_login.php base64-decodes a JWT payload and authenticates users from the upn claim without verifying the JWT signature, allowing an unauthenticated attacker to forge a token and obtain a Moodle session as an O365-authenticated user. This issue is fixed in versions 4.5.6, 5.0.5, and 5.1.1. | Sat 24 Oct |
| CVE-2025-13953 | 9.3 critical | 1.0% | no CPE yet | Bypass vulnerability in the authentication method in the GTT Tax Information System application, related to the Active Directory (LDAP) login method. Authentication is performed through a local WebSocket, but the web application does not properly validate the authenticity or origin of the data received, allowing an attacker with access to the local machine or internal network to impersonate the legitimate WebSocket and inject manipulated information. Exploiting this vulnerability could allow an attacker to authenticate as any user in the domain, without the need for valid credentials, compromising the confidentiality, integrity, and availability of the application and its data. | 14 Oct |
| CVE-2026-96252 | 9.1 critical | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_server_2012 | Improper verification of cryptographic signature in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network. | 20 Oct |
| CVE-2026-62818 | 8.8 high | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows server 2012 | Use after free in Active Directory Certificate Services (AD CS) allows an authorized attacker to execute code over a network. | 16 h ago |
| CVE-2026-49178 | 8.8 high | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Heap-based buffer overflow in Active Directory Domain Services allows an authorized attacker to execute code over a network. | 16 h ago |
| CVE-2026-88165 | 8.8 high | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Out-of-bounds write in Active Directory Domain Services allows an authorized attacker to execute code over a network. | 20 Oct |
| CVE-2026-49164 | 8.1 high | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Heap-based buffer overflow in Active Directory Domain Services allows an unauthorized attacker to execute code over a network. | 16 h ago |
| CVE-2026-70229 | 8.1 high | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Incorrect authorization in Active Directory Domain Services allows an unauthorized attacker to execute code over a network. | 19 h ago |
| CVE-2026-83674 | 8.1 high | 1.0% | no CPE yet | Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network. | 19 Oct |
| CVE-2026-50647 | 7.5 high | 1.0% | microsoft, microsoft .net framework 3.5 and 4.7.2, microsoft .net framework 3.5 and 4.8, microsoft .net framework 3.5 and 4.8.1 | Loop with unreachable exit condition ('infinite loop') in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network. | 16 h ago |
| CVE-2026-50411 | 7.5 high | 1.0% | microsoft, microsoft .net framework 3.5 and 4.7.2, microsoft .net framework 3.5 and 4.8, microsoft .net framework 3.5 and 4.8.1 | Stack-based buffer overflow in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network. | 16 h ago |
| CVE-2026-50355 | 7.5 high | 1.0% | microsoft, microsoft .net framework 3.5 and 4.7.2, microsoft .net framework 3.5 and 4.8, microsoft .net framework 3.5 and 4.8.1 | Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network. | 16 h ago |
| CVE-2026-50368 | 7.5 high | 1.0% | microsoft, microsoft .net framework 3.5 and 4.7.2, microsoft .net framework 3.5 and 4.8, microsoft .net framework 3.5 and 4.8.1 | Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network. | 16 h ago |
| CVE-2026-50304 | 7.5 high | 1.0% | microsoft, microsoft .net framework 3.5 and 4.7.2, microsoft .net framework 3.5 and 4.8, microsoft .net framework 3.5 and 4.8.1 | Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network. | 16 h ago |
| CVE-2026-50653 | 7.5 high | 1.0% | microsoft, azure active directory, microsoft .net framework 3.5, microsoft .net framework 3.5 and 4.7.2 | Loop with unreachable exit condition ('infinite loop') in Azure Active Directory allows an unauthorized attacker to deny service over a network. | 16 h ago |
| CVE-2026-54119 | 7.5 high | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Loop with unreachable exit condition ('infinite loop') in Windows Active Directory allows an unauthorized attacker to deny service over a network. | 16 h ago |
| CVE-2026-50695 | 7.5 high | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network. | 16 h ago |
| CVE-2026-54983 | 7.5 high | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Stack-based buffer overflow in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network. | 16 h ago |
| CVE-2026-54554 | 7.5 high | 1.0% | no CPE yet | FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to 1.5.10.1870, the management adInfo() endpoint in packages/web/lib/fog/fogpage.class.php was reported to return the FOG_AD_DEFAULT_PASSWORD value in its domainpass JSON field and to be dispatchable through node=ipxe without an authenticated session. The response was also consumed by host and group Active Directory configuration interfaces. This could disclose the default domain-join credential to a remote unauthenticated requester. This vulnerability is fixed in 1.5.10.1870. | 20 Oct |
| CVE-2026-108131 | 7.5 high | 1.0% | no CPE yet | No cwe for this issue in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network. | 19 Oct |
| CVE-2026-83647 | 7.5 high | 1.0% | no CPE yet | Out-of-bounds read in Active Directory Domain Services allows an unauthorized attacker to deny service over a network. | 19 Oct |
| CVE-2026-83645 | 7.5 high | 1.0% | no CPE yet | Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network. | 19 Oct |
| CVE-2026-85321 | 7.5 high | 1.0% | no CPE yet | Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network. | 19 Oct |
| CVE-2026-85319 | 7.5 high | 1.0% | no CPE yet | Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network. | 19 Oct |
| CVE-2026-97788 | 7.5 high | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attacker to disclose information over a network. | 16 Oct |
| CVE-2026-85324 | 7.5 high | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_server_2012 | Memory allocation with excessive size value in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network. | 16 Oct |
| CVE-2026-83511 | 7.4 high | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_server_2012 | Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network. | 18 h ago |
| CVE-2026-96222 | 7.4 high | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_server_2012 | Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network. | Thu 22 Oct |
| CVE-2026-50682 | 7.1 high | 1.0% | microsoft, windows 10 version 21h2, windows 10 version 22h2, windows 11 version 24h2 | Out-of-bounds read in Windows Active Directory allows an authorized attacker to deny service over a network. | 16 h ago |
| CVE-2026-58529 | 7.1 high | 1.0% | microsoft, windows_11_26h1 | Out-of-bounds read in Active Directory Federation Services (AD FS) allows an authorized attacker to disclose information over a network. | Sat 24 Oct |
| CVE-2026-50366 | 6.5 medium | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network. | 16 h ago |
| CVE-2026-57976 | 6.5 medium | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network. | 16 h ago |
| CVE-2026-103576 | 6.5 medium | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_server_2016 | Url redirection to untrusted site ('open redirect') in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network. | Tue 27 Oct |
| CVE-2026-83667 | 6.5 medium | 1.0% | no CPE yet | Out-of-bounds read in Active Directory Domain Services allows an authorized attacker to deny service over a network. | 19 Oct |
| CVE-2026-83648 | 6.5 medium | 1.0% | no CPE yet | Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network. | 19 Oct |
| CVE-2026-50324 | 5.9 medium | 1.0% | microsoft, microsoft .net framework 3.5 and 4.7.2, microsoft .net framework 3.5 and 4.8, microsoft .net framework 3.5 and 4.8.1 | Loop with unreachable exit condition ('infinite loop') in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network. | 16 h ago |
| CVE-2026-70005 | 5.9 medium | 1.0% | microsoft, windows_server_2019, windows_server_2022, windows_server_2025 | Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to bypass a security feature over a network. | 20 h ago |
| CVE-2026-69982 | 5.9 medium | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_server_2012 | Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to bypass a security feature over a network. | Mon 26 Oct |
| CVE-2026-112709 | 9.2 critical | 0.00% | no CPE yet | A heap-based buffer overflow vulnerability in the Fireware OS authentication service allows an attacker who controls or intercepts traffic to the configured Active Directory server to create a denial of service condition and potentially execute arbitrary code by returning a specially crafted response. | 22 h ago |
| CVE-2026-112710 | 9.2 critical | 0.00% | no CPE yet | A heap-based buffer overflow vulnerability exists in the Fireware OS authentication service allows an attacker who controls or intercepts traffic to the configured Active Directory server to create a denial of service condition and potentially execute arbitrary code by returning a specially crafted response. | 22 h ago |
| CVE-2025-9317 | 8.3 high | 0.00% | no CPE yet | The vulnerability, if exploited, could allow a miscreant with read access to Edge Project files or Edge Offline Cache files to reverse engineer Edge users' app-native or Active Directory passwords through computational brute-forcing of weak hashes. | 18 Oct |
50 of 75 · Next
Download these 75 as CSV · subscribe to this list.
EPSS scores: 2026-10-28. NVD cursor: 2026-10-29 00:22. The News page shows only notable CVEs (KEV, your stack, new criticals, EPSS over 50%, or active exploitation per SSVC); this table has all of them.