Windows Active Directory Federation Services Denial of Service Vulnerability
To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-50355US | — | — | ||
Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network. | ||||
references
External citations — patches, advisories, analysis.
- CVE-2026-50355 Windows Active Directory Federation Services Denial of Service Vulnerability - CSAFself
- CVE-2026-50355 Windows Active Directory Federation Services Denial of Service Vulnerability - HTMLself
- Microsoft Support Lifecycleexternal
- Common Vulnerability Scoring Systemexternal
- Microsoft Exploitability Indexexternal
remediations (21)
- FixedMicrosoft .NET Framework 3.5 AND 4.7.2
2.0.50727.8983 & 3.0.30729.8978 & 4.7.4143.0:Security Update:https://support.microsoft.com/help/5099535
https://support.microsoft.com/help/5099535 - FixedMicrosoft .NET Framework 3.5 AND 4.8
2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0:Security Update:https://support.microsoft.com/help/5101006
https://support.microsoft.com/help/5101006 - FixedMicrosoft .NET Framework 3.5 AND 4.8.1
2.0.50727.9182 & 3.0.30729.9168 & 4.8.9340.0:Security Update:https://support.microsoft.com/help/5100998
https://support.microsoft.com/help/5100998 - FixedMicrosoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2
4.7.4143.0:Security Update:https://support.microsoft.com/help/5100990
https://support.microsoft.com/help/5100990 - FixedMicrosoft .NET Framework 4.8
4.8.4803.0:Security Update:https://support.microsoft.com/help/5101007
https://support.microsoft.com/help/5101007 - FixedMicrosoft .NET Framework 4.8.1
4.8.9340.0:Security Update:https://support.microsoft.com/help/5101002
https://support.microsoft.com/help/5101002 - FixedWindows 10 Version 1607 for 32-bit Systems
10.0.14393.9339:Security Update:https://support.microsoft.com/help/5099535
https://support.microsoft.com/help/5099535 - FixedWindows 10 Version 1607 for x64-based Systems
10.0.14393.9339:Security Update:https://support.microsoft.com/help/5099535
https://support.microsoft.com/help/5099535 - FixedWindows 10 Version 1809 for 32-bit Systems
10.0.17763.9020:Security Update:https://support.microsoft.com/help/5099538
https://support.microsoft.com/help/5099538 - FixedWindows 10 Version 1809 for x64-based Systems
10.0.17763.9020:Security Update:https://support.microsoft.com/help/5099538
https://support.microsoft.com/help/5099538 - FixedWindows Server 2012
6.2.9200.26226:Monthly Rollup:https://support.microsoft.com/help/5099445
https://support.microsoft.com/help/5099445 - FixedWindows Server 2012 (Server Core installation)
6.2.9200.26226:Monthly Rollup:https://support.microsoft.com/help/5099445
https://support.microsoft.com/help/5099445 - FixedWindows Server 2012 R2
6.3.9600.23291:Monthly Rollup:https://support.microsoft.com/help/5099444
https://support.microsoft.com/help/5099444 - FixedWindows Server 2012 R2 (Server Core installation)
6.3.9600.23291:Monthly Rollup:https://support.microsoft.com/help/5099444
https://support.microsoft.com/help/5099444 - FixedWindows Server 2016
10.0.14393.9339:Security Update:https://support.microsoft.com/help/5099535
https://support.microsoft.com/help/5099535 - FixedWindows Server 2016 (Server Core installation)
10.0.14393.9339:Security Update:https://support.microsoft.com/help/5099535
https://support.microsoft.com/help/5099535 - FixedWindows Server 2019
10.0.17763.9020:Security Update:https://support.microsoft.com/help/5099538
https://support.microsoft.com/help/5099538 - FixedWindows Server 2019 (Server Core installation)
10.0.17763.9020:Security Update:https://support.microsoft.com/help/5099538
https://support.microsoft.com/help/5099538 - FixedWindows Server 2022
10.0.20348.5386:Security Update:https://support.microsoft.com/help/5099540
https://support.microsoft.com/help/5099540 - FixedWindows Server 2025
10.0.26100.33158:Security Update:https://support.microsoft.com/help/5099536
https://support.microsoft.com/help/5099536 - FixedWindows Server 2025 (Server Core installation)
10.0.26100.33158:Security Update:https://support.microsoft.com/help/5099536
https://support.microsoft.com/help/5099536
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan