CVE-2026-56155

High KEV · actively exploited PoC available

CVSS base score

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Insufficient granularity of access control in Active Directory Federation Services (AD FS) allows an authorized attacker to elevate privileges locally.

Vendor

microsoft

Product

windows 10 1607

Affected

microsoft windows 10 1607

Weakness

CWE-1220 · Vulnerability

Published

Jul 14, 2026

Last modified

Jul 15, 2026

CVSS version

v3.1

Views

// References & exploits

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56155Vendor Advisory https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-56155US Government Resource

NVD record Search PoCs