active directory security

Microsoft’s tracking entry for CVE-2026-20849 records an elevation‑of‑privilege defect in the Windows Kerberos authentication stack, but the public advisory is deliberately concise: the vendor confirms the vulnerability’s existence while publishing limited low‑level exploit detail — a disclosure...

A newly cataloged Windows LDAP weakness, tracked as CVE-2026-20812, directs attention back to the protocol at the center of Active Directory and modern Windows identity infrastructure: the Lightweight Directory Access Protocol (LDAP). Microsoft’s advisory states the core issue is improper input...