Vulnerabilities

Observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attacker to disclose information over a network.

Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network.

Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.

Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.

Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.

Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.

Relative path traversal in .NET Framework allows an unauthorized attacker to elevate privileges locally.

Incorrect authorization in .NET Framework allows an authorized attacker to elevate privileges over a network.

Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to execute code locally.

Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network.

Improper control of generation of code ('code injection') in .NET Framework allows an unauthorized attacker to elevate privileges locally.

Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally.

Allocation of resources without limits or throttling in .NET Framework allows an unauthorized attacker to deny service over a network.

Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally.

Stack-based buffer overflow in .NET Framework allows an unauthorized attacker to deny service over a network.

Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.

Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.

Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.

Loop with unreachable exit condition ('infinite loop') in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.

Stack-based buffer overflow in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.

Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network.

Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network.

Loop with unreachable exit condition ('infinite loop') in Azure Active Directory allows an unauthorized attacker to deny service over a network.

Deserialization of untrusted data in Azure Active Directory allows an unauthorized attacker to deny service over a network.

Improper input validation in .NET allows an unauthorized attacker to elevate privileges locally.