CVE-2026-50653
HighCVSS 7.5Exploitation Probability (EPSS)
Elevated risk53th percentile - higher than 53% of all known CVEs
Summary
An infinite loop in Azure Active Directory allows an unauthorized attacker to deny service over a network.
Risk Assessment
An attacker can remotely cause the Azure AD service to hang, preventing authentication and authorization.
Recommendation
Apply the security update for Azure Active Directory from Microsoft.
Other vulnerabilities in Azure Active Directory
See all- CVE-2026-69851Critical
Server-side request forgery (SSRF) in Azure Active Directory allows an authorized attacker to elevate privileges over a network.
- CVE-2026-50481Critical
Modification of assumed-immutable data (MAID) in Azure Active Directory allows an authorized attacker to elevate privileges over a network.
- CVE-2026-45480Critical
Improper authentication in Azure Active Directory allows an unauthorized attacker to elevate privileges over a network.
- CVE-2026-50652High
In Azure Active Directory, a deserialization of untrusted data vulnerability allows an unauthorized attacker to perform a denial of service (DoS) attack over the network.
- CVE-2023-36871Medium
A vulnerability in Azure Active Directory allows for a security feature bypass, potentially leading to unauthorized access to resources.
Original NVD description (English source)
Loop with unreachable exit condition ('infinite loop') in Azure Active Directory allows an unauthorized attacker to deny service over a network.