CVE-2026-56155

نوع الضعف

Insufficient granularity of access control in Active Directory Federation Services (AD FS) allows an authorized attacker to elevate privileges locally.

المنتجات المتأثرة

• microsoft windows_10_1607
• microsoft windows_10_1809
• microsoft windows_server_2012
• microsoft windows_server_2016
• microsoft windows_server_2019
• microsoft windows_server_2022
• microsoft windows_server_2025

المراجع

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56155
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-56155