CVE-2026-85321
HighCVSS 7.5Summary
Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.
Risk Assessment
An unauthenticated attacker could remotely cause AD FS unavailability, potentially disrupting authentication across the organization.
Recommendation
Apply security updates and restrict network access to the AD FS service to only necessary hosts.
Other vulnerabilities in Active Directory Federation Services (AD FS)
See all- CVE-2026-85324High
Memory allocation with excessive size value in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.
- CVE-2026-85319High
Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.
- CVE-2026-96252Critical
Improper verification of cryptographic signature in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network. An attacker could impersonate a trusted identity.
- CVE-2026-50684Medium
Improper neutralization of input during web page generation (cross-site scripting) in Active Directory Federation Services (AD FS) allows an authorized attacker to perform spoofing over a network.
Original NVD description (English source)
Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS