CVE intelligence
Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability
Microsoft · Published 2026-07-14 · CVSS 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HAVAttack VectorLocalACAttack ComplexityLowPRPrivileges RequiredLowUIUser InteractionNoneSScopeUnchangedCConfidentialityHighIIntegrityHighAAvailabilityHigh high · KEV listed 2026-07-14 · Action due 2026-07-28
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AV
AC
PR
UI
S
C
I
A
NIST record