CVE record · 6 sources
CVE-2026-56155
KEVCVSS 10.0Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability
- Vendor
- Microsoft
- Product
- Active Directory Federation Services
- CVSS
- 10.0
- CISA KEV
- listed
- Exposure class
- Identity, Web platform, Remote access, Collaboration
Coverage
6Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability
Microsoft Active Directory Federation Services contains an insufficient granularity of access control vulnerability that allows an authorized attacker to elevate privileges locally.
-
July 2026 Patch Tuesday
Patch Tuesday Watch: What Led Up to July 2026 Adobe Release date: June 30, 2026 (APSB26-68 — ColdFusion; same-day bulletin for Campaign Classic) CVE count: 11 CVEs in ColdFusion, 1 in Campaign Classic (12 total) Adobe's…
-
CISA Adds Four Known Exploited Vulnerabilities to Catalog
CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-15409 SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability…
-
CVE-2026-56155 Active Directory Federation Services Elevation of Privilege Vulnerability
Insufficient granularity of access control in Active Directory Federation Services (AD FS) allows an authorized attacker to elevate privileges locally.
-
The July 2026 Security Update Review
Well folks. Here we are. The bug apocalypse has fully descended upon us. I’ll do my best to sort this out in some way meaningful, but this month’s release shows us the nay-sayers were right, and I’ve got to hand it to the…
-
July 2026 CVE Landscape
In July 2026, Insikt Group® identified 85 high-impact vulnerabilities that should be prioritized for remediation, 36 of which had a Very Critical Recorded Future Risk Score. This represents a 44% increase from last month.