Active Directory Federation Services (AD FS) vulnerabilities
5 known CVE vulnerabilities in Active Directory Federation Services (AD FS), translated and rated.
- CVE-2026-85324High
Memory allocation with excessive size value in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.
- CVE-2026-85321High
Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.
- CVE-2026-85319High
Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.
- CVE-2026-96252Critical
Improper verification of cryptographic signature in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network. An attacker could impersonate a trusted identity.
- CVE-2026-50684Medium
Improper neutralization of input during web page generation (cross-site scripting) in Active Directory Federation Services (AD FS) allows an authorized attacker to perform spoofing over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

