CVE-2026-56155

Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability

Windows 10 1607

Insufficient granularity of access control in Active Directory Federation Services (AD FS) allows an authorized attacker to elevate privileges locally.

14. Jul 2026

Ausgewertete Quellen

• Microsoft
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56155
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-56155
• CISA
  Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability
• NVD
  CVE-2026-56155