Windows Active Directory Federation Services Denial of Service Vulnerability
Loop with unreachable exit condition ('infinite loop') in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Microsoft .NET Framework 3.5 AND 4.7.2
Vendor
Microsoft
Product
Microsoft .NET Framework 3.5 AND 4.7.2
Platforms
Windows 10 Version 1607 for 32-bit Systems
Windows 10 Version 1607 for x64-based Systems
Windows 10 Version 1809 for 32-bit Systems
Windows 10 Version 1809 for x64-based Systems
Windows Server 2016
Windows Server 2016 (Server Core installation)
Windows Server 2019
Windows Server 2019 (Server Core installation)
Default status
Unknown
Microsoft .NET Framework 3.5 AND 4.7.2 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
4.7.0
affected
custom
2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0
Unavailable
None listed
Microsoft .NET Framework 3.5 AND 4.8
Vendor
Microsoft
Product
Microsoft .NET Framework 3.5 AND 4.8
Platforms
Windows 10 Version 1809 for 32-bit Systems
Windows 10 Version 1809 for x64-based Systems
Windows 10 Version 21H2 for 32-bit Systems
Windows 10 Version 21H2 for ARM64-based Systems
Windows 10 Version 21H2 for x64-based Systems
Windows 10 Version 22H2 for 32-bit Systems
Windows 10 Version 22H2 for ARM64-based Systems
Windows 10 Version 22H2 for x64-based Systems
Windows Server 2019
Windows Server 2019 (Server Core installation)
Windows Server 2022
Windows Server 2022 (Server Core installation)
Default status
Unknown
Microsoft .NET Framework 3.5 AND 4.8 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
4.8.0
affected
custom
2.0.50727.9069 & 3.0.30729.9067 & 4.8.4803.0
Unavailable
None listed
Microsoft .NET Framework 3.5 AND 4.8.1
Vendor
Microsoft
Product
Microsoft .NET Framework 3.5 AND 4.8.1
Platforms
Windows 10 Version 21H2 for 32-bit Systems
Windows 10 Version 21H2 for ARM64-based Systems
Windows 10 Version 21H2 for x64-based Systems
Windows 10 Version 22H2 for 32-bit Systems
Windows 10 Version 22H2 for ARM64-based Systems
Windows 10 Version 22H2 for x64-based Systems
Windows 11 Version 23H2 for ARM64-based Systems
Windows 11 Version 23H2 for x64-based Systems
Windows 11 Version 24H2 for ARM64-based Systems
Windows 11 Version 24H2 for x64-based Systems
Windows 11 Version 25H2 for ARM64-based Systems
Windows 11 Version 25H2 for x64-based Systems
Windows Server 2022
Windows Server 2022 (Server Core installation)
Default status
Unknown
Microsoft .NET Framework 3.5 AND 4.8.1 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
4.8.1
affected
custom
2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0
Unavailable
None listed
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2
Vendor
Microsoft
Product
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2
Platforms
Windows Server 2012
Windows Server 2012 (Server Core installation)
Windows Server 2012 R2
Windows Server 2012 R2 (Server Core installation)
Default status
Unknown
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
4.7.0
affected
custom
4.7.4143.0
Unavailable
None listed
Microsoft .NET Framework 4.8
Vendor
Microsoft
Product
Microsoft .NET Framework 4.8
Platforms
Windows 10 Version 1607 for 32-bit Systems
Windows 10 Version 1607 for x64-based Systems
Windows Server 2012
Windows Server 2012 (Server Core installation)
Windows Server 2012 R2
Windows Server 2012 R2 (Server Core installation)
Windows Server 2016
Windows Server 2016 (Server Core installation)
Default status
Unknown
Microsoft .NET Framework 4.8 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
4.8.0
affected
custom
4.8.4803.0
Unavailable
None listed
Microsoft .NET Framework 4.8.1
Vendor
Microsoft
Product
Microsoft .NET Framework 4.8.1
Platforms
Windows 11 Version 26H1 for ARM64-based Systems
Windows 11 version 26H1 for x64-based Systems
Default status
Unknown
Microsoft .NET Framework 4.8.1 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
4.8.0.0
affected
custom
4.8.9340.0
Unavailable
None listed
Windows 10 Version 1607
Vendor
Microsoft
Product
Windows 10 Version 1607
Platforms
32-bit Systems
x64-based Systems
Default status
Unknown
Windows 10 Version 1607 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
10.0.14393.0
affected
custom
10.0.14393.9339
Unavailable
None listed
Windows 10 Version 1809
Vendor
Microsoft
Product
Windows 10 Version 1809
Platforms
32-bit Systems
x64-based Systems
Default status
Unknown
Windows 10 Version 1809 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
10.0.17763.0
affected
custom
10.0.17763.9020
Unavailable
None listed
Windows Server 2012 R2
Vendor
Microsoft
Product
Windows Server 2012 R2
Platforms
x64-based Systems
Default status
Unknown
Windows Server 2012 R2 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
6.3.9600.0
affected
custom
6.3.9600.23291
Unavailable
None listed
Windows Server 2012 R2 (Server Core installation)
Vendor
Microsoft
Product
Windows Server 2012 R2 (Server Core installation)
Platforms
x64-based Systems
Default status
Unknown
Windows Server 2012 R2 (Server Core installation) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
6.3.9600.0
affected
custom
6.3.9600.23291
Unavailable
None listed
Windows Server 2016
Vendor
Microsoft
Product
Windows Server 2016
Platforms
x64-based Systems
Default status
Unknown
Windows Server 2016 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
10.0.14393.0
affected
custom
10.0.14393.9339
Unavailable
None listed
Windows Server 2016 (Server Core installation)
Vendor
Microsoft
Product
Windows Server 2016 (Server Core installation)
Platforms
x64-based Systems
Default status
Unknown
Windows Server 2016 (Server Core installation) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
10.0.14393.0
affected
custom
10.0.14393.9339
Unavailable
None listed
Windows Server 2019
Vendor
Microsoft
Product
Windows Server 2019
Platforms
x64-based Systems
Default status
Unknown
Windows Server 2019 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
10.0.17763.0
affected
custom
10.0.17763.9020
Unavailable
None listed
Windows Server 2019 (Server Core installation)
Vendor
Microsoft
Product
Windows Server 2019 (Server Core installation)
Platforms
x64-based Systems
Default status
Unknown
Windows Server 2019 (Server Core installation) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
10.0.17763.0
affected
custom
10.0.17763.9020
Unavailable
None listed
Windows Server 2022
Vendor
Microsoft
Product
Windows Server 2022
Platforms
x64-based Systems
Default status
Unknown
Windows Server 2022 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
10.0.20348.0
affected
custom
10.0.20348.5386
Unavailable
None listed
Windows Server 2025
Vendor
Microsoft
Product
Windows Server 2025
Platforms
x64-based Systems
Default status
Unknown
Windows Server 2025 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
10.0.26100.0
affected
custom
10.0.26100.33158
Unavailable
None listed
Windows Server 2025 (Server Core installation)
Vendor
Microsoft
Product
Windows Server 2025 (Server Core installation)
Platforms
x64-based Systems
Default status
Unknown
Windows Server 2025 (Server Core installation) · Scoped product and version facts