medium5.9
CVE-2026-50324
Loop with unreachable exit condition ('infinite loop') in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a n…
Impact
Loop with unreachable exit condition ('infinite loop') in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Windows 10 1607 | before 10.0.14393.9339 |
| Microsoft | Windows 10 1809 | before 10.0.17763.9020 |
| Microsoft | Windows Server 2012 | All versions Version r2 |
| Microsoft | Windows Server 2016 | before 10.0.14393.9339 |
| Microsoft | Windows Server 2019 | before 10.0.17763.9020 |
| Microsoft | Windows Server 2022 | before 10.0.20348.5386 |
| Microsoft | Windows Server 2025 | before 10.0.26100.33158 |
| Microsoft | Microsoft .NET Framework 3.5 AND 4.7.2 | from 4.7.0 before 2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0 Version 4.7.0 <2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0 |
| Microsoft | Microsoft .NET Framework 3.5 AND 4.8 | from 4.8.0 before 2.0.50727.9069 & 3.0.30729.9067 & 4.8.4803.0 Version 4.8.0 <2.0.50727.9069 & 3.0.30729.9067 & 4.8.4803.0 |
| Microsoft | Microsoft .NET Framework 3.5 AND 4.8.1 | from 4.8.1 before 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0 Version 4.8.1 <2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0 |
| Microsoft | Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 | from 4.7.0 before 4.7.4143.0 |
| Microsoft | Microsoft .NET Framework 4.8 | from 4.8.0 before 4.8.4803.0 |
| Microsoft | Microsoft .NET Framework 4.8.1 | from 4.8.0.0 before 4.8.9340.0 |
| Microsoft | Windows 10 Version 1607 | from 10.0.14393.0 before 10.0.14393.9339 |
| Microsoft | Windows 10 Version 1809 | from 10.0.17763.0 before 10.0.17763.9020 |
| Microsoft | Windows Server 2012 R2 | from 6.3.9600.0 before 6.3.9600.23291 |
| Microsoft | Windows Server 2012 R2 (Server Core Installation) | from 6.3.9600.0 before 6.3.9600.23291 |
| Microsoft | Windows Server 2016 | from 10.0.14393.0 before 10.0.14393.9339 |
| Microsoft | Windows Server 2016 (Server Core Installation) | from 10.0.14393.0 before 10.0.14393.9339 |
| Microsoft | Windows Server 2025 (Server Core Installation) | from 10.0.26100.0 before 10.0.26100.33158 |
| Microsoft | Windows Server 2019 | from 10.0.17763.0 before 10.0.17763.9020 |
| Microsoft | Windows Server 2025 | from 10.0.26100.0 before 10.0.26100.33158 |