CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Microsoft Active Directory Federation Services (AD FS) Privilege Escalation Vulnerability (CVE-2026-56155) Security Advisory
[Affected Scope] Windows Server environments with Active Directory Federation Services (AD FS) enabled
[Impact] An authorized local attacker with low privileges can exploit insufficient access control granularity to elevate privileges to SYSTEM
[Mitigation] Apply the official Microsoft security updates immediately and audit AD FS service account and directory permissions
Citrix Session Recording Privilege Escalation Vulnerability (CVE-2024-8068) Technical Advisory
[Affected Scope] Authenticated users within the same Windows Active Directory domain as the Citrix Session Recording server
[Impact] Privilege escalation to 'NetworkService' account, enabling unauthorized system control and potential lateral movement within the AD domain
[Mitigation] Immediately upgrade Citrix Session Recording components to the latest patched versions recommended by the vendor
VMware ESXi Authentication Bypass and Privilege Escalation via Active Directory Integration (CVE-2024-37085)
[Affected Scope] VMware ESXi hosts configured to use Active Directory (AD) for user management.
[Impact] A malicious actor with group creation permissions in AD can gain full administrative access to the ESXi host by re-creating the deleted 'ESXi Admins' group.
[Mitigation] Apply the official security patches from Broadcom or change the default ESXi Admins group setting to an unprivileged/non-existent group name.