CVE-2026-96222
HighCVSS 7.4Summary
A vulnerability in Active Directory Federation Services (AD FS) related to improper certificate validation allows an unauthorized attacker to perform spoofing over a network.
Risk Assessment
An attacker may impersonate a trusted entity, potentially leading to unauthorized access to systems and data.
Recommendation
Install the latest security updates for AD FS.
Other vulnerabilities in Active Directory Federation Services
See all- CVE-2026-97788High
Observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attacker to disclose information over a network.
- CVE-2026-56155HighActively exploited
Insufficient granularity of access control in Active Directory Federation Services (AD FS) allows an authorized attacker to elevate privileges locally.
- CVE-2026-72978Medium
Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.
- CVE-2026-58529High
An out-of-bounds read vulnerability in Active Directory Federation Services (AD FS) allows an authorized attacker to disclose information over a network.
- CVE-2026-50647High
An infinite loop in Active Directory Federation Services (AD FS) allows an unauthorized attacker to remotely cause a denial of service (DoS).
- CVE-2026-50411High
A stack-based buffer overflow in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.
- CVE-2026-50368High
A stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network.
- CVE-2026-50355High
A stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to remotely cause a denial of service (DoS).
- CVE-2026-50324Medium
An infinite loop in Active Directory Federation Services (AD FS) allows an unauthorized attacker to cause a denial of service over the network.
- CVE-2026-50304High
Stack-based buffer overflow in Active Directory Federation Services (ADFS) allows an unauthorized attacker to perform a DoS attack over the network.
Original NVD description (English source)
Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS