CVE-2026-54983
HighCVSS 7.5Exploitation Probability (EPSS)
Elevated risk52th percentile - higher than 52% of all known CVEs
Summary
A stack-based buffer overflow vulnerability in Active Directory Federation Services (AD FS) allows an unauthorized attacker to remotely execute code or cause a denial of service (DoS) by sending a specially crafted network request.
Risk Assessment
An attacker can remotely crash the AD FS service, preventing authentication and authorization across the organization, leading to service outages for applications and resources.
Recommendation
Apply the security update provided by the vendor for AD FS immediately and restrict network access to the service to trusted hosts only.
Other vulnerabilities in Active Directory Federation Services
See all- CVE-2026-97788High
Observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attacker to disclose information over a network.
- CVE-2026-96222High
A vulnerability in Active Directory Federation Services (AD FS) related to improper certificate validation allows an unauthorized attacker to perform spoofing over a network.
- CVE-2026-56155HighActively exploited
Insufficient granularity of access control in Active Directory Federation Services (AD FS) allows an authorized attacker to elevate privileges locally.
- CVE-2026-72978Medium
Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.
- CVE-2026-58529High
An out-of-bounds read vulnerability in Active Directory Federation Services (AD FS) allows an authorized attacker to disclose information over a network.
- CVE-2026-50647High
An infinite loop in Active Directory Federation Services (AD FS) allows an unauthorized attacker to remotely cause a denial of service (DoS).
- CVE-2026-50411High
A stack-based buffer overflow in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.
- CVE-2026-50368High
A stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network.
- CVE-2026-50355High
A stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to remotely cause a denial of service (DoS).
- CVE-2026-50324Medium
An infinite loop in Active Directory Federation Services (AD FS) allows an unauthorized attacker to cause a denial of service over the network.
Original NVD description (English source)
Stack-based buffer overflow in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS