AD vulnerabilities