Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability
Microsoft Active Directory Federation Services contains an insufficient granularity of access control vulnerability that allows an authorized attacker to elevate privileges locally.
Read at CISA Known Exploited Vulnerabilities catalog
- Vendor
- Microsoft
- Product
- Active Directory Federation Services
- CISA KEV
- listed
- Exploitation
- observed in the wild
- Fix
- available
- Exposure class
- Identity
Why it ranks 69 (Critical)
- CISA KEV listed
- Exposed product class: identity
- Widely deployed vendor product (Microsoft)
- Covered by 2 independent sources
- Fix available
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- CISA Known Exploited Vulnerabilities catalog (nvd.nist.gov)
- CVE-2026-56155 on this site · NVD · CVE.org · Vulnpedia · KEV
Related coverage
Other items that share a CVE or were clustered with this one.