CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Reset
Showing 1โ€“1 of 1 advisories (Page 1/1)
CVE-2026-561557.8/HIGHEPSS 0.4%CISA KEV
2026-07-14

Microsoft Active Directory Federation Services (AD FS) Privilege Escalation Vulnerability (CVE-2026-56155) Security Advisory

[Affected Scope] Windows Server environments with Active Directory Federation Services (AD FS) enabled

[Impact] An authorized local attacker with low privileges can exploit insufficient access control granularity to elevate privileges to SYSTEM

[Mitigation] Apply the official Microsoft security updates immediately and audit AD FS service account and directory permissions

CVE Vulnerability Advisory Database (CVSS ยท CISA KEV ยท EPSS) | CVE Pulse