Active Directory Domain Services vulnerabilities
19 known CVE vulnerabilities in Active Directory Domain Services, translated and rated.
- CVE-2026-88165High
Out-of-bounds write in Active Directory Domain Services allows an authorized attacker to execute code over a network.
- CVE-2026-83647High
Out-of-bounds read in Active Directory Domain Services allows an unauthorized attacker to deny service over a network.
- CVE-2026-70229High
Incorrect authorization in Active Directory Domain Services. An unauthorized attacker can execute code over a network.
- CVE-2022-26923HighActively exploited
A privilege elevation vulnerability in Active Directory Domain Services (AD DS). An attacker can gain domain administrator privileges.
- CVE-2021-42287HighActively exploited
Active Directory Domain Services Elevation of Privilege Vulnerability. Technical details are not provided in the description.
- CVE-2021-42278HighActively exploited
Active Directory Domain Services Elevation of Privilege Vulnerability. Technical details are not provided in the description.
- CVE-2026-69809High
Missing release of memory after effective lifetime in Active Directory Domain Services allows an unauthorized attacker to deny service over a network.
- CVE-2026-69546High
Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.
- CVE-2026-69524High
Use-after-free vulnerability in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.
- CVE-2026-69359High
Heap-based buffer overflow in Active Directory Domain Services allows an authorized attacker to elevate privileges locally.
- CVE-2026-62813High
Use after free in Active Directory Domain Services allows an authorized attacker to execute code over a network.
- CVE-2026-62762Medium
Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network.
- CVE-2026-50366Medium
A null pointer dereference in Active Directory Domain Services allows an authorized attacker to cause a denial of service over the network.
- CVE-2026-57976Medium
A null pointer dereference in Active Directory Domain Services allows an authorized attacker to cause a denial of service over the network.
- CVE-2026-49178High
A heap-based buffer overflow in Active Directory Domain Services allows an authorized attacker to execute code remotely over a network.
- CVE-2026-49164High
A heap-based buffer overflow in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.
- CVE-2026-45648High
Stack-based buffer overflow in Active Directory Domain Services allows an authorized attacker to execute code over a network.
- CVE-2021-42291High
Elevation of privilege vulnerability in Active Directory Domain Services. Allows an attacker to gain elevated privileges in the domain.
- CVE-2021-42282High
Elevation of privilege vulnerability in Active Directory Domain Services. Allows an attacker to gain elevated privileges in the domain.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS