- Record status
- Published
- Identifier year (not publication year)
- 2026
- Source publication
- Source updated
- Imported by cveboard
CNA source text (English)
Active Directory Federation Services (AD FS) Spoofing Vulnerability
Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Microsoft .NET Framework 3.5
- Vendor
- Microsoft
- Product
- Microsoft .NET Framework 3.5
- Platforms
- Windows 11 version 26H1
- Windows Server 2012
- Windows Server 2012 R2
- Default status
Unknown
Microsoft .NET Framework 3.5 · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
| 3.5.0 | affected | custom | 2.0.50727.9188 AND 3.0.30729.9171 | Unavailable | None listed |
|---|
Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2
- Vendor
- Microsoft
- Product
- Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2
- Platforms
- Windows 10 version 1607
- Windows Server 2016
- Windows Server 2019
- Default status
Unknown
Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
| 3.0.0.0 | affected | custom | 2.0.50727.8987 AND 3.0.30729.8982 AND 4.7.4150.0 | Unavailable | None listed |
|---|
Microsoft .NET Framework 3.5 AND 4.7.2
- Vendor
- Microsoft
- Product
- Microsoft .NET Framework 3.5 AND 4.7.2
- Default status
Unknown
Microsoft .NET Framework 3.5 AND 4.7.2 · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
| 4.7.0 | affected | custom | 2.0.50727.9073 AND 3.0.30729.9070 AND 4.7.4150.0 | Unavailable | None listed |
|---|
Microsoft .NET Framework 3.5 AND 4.8
- Vendor
- Microsoft
- Product
- Microsoft .NET Framework 3.5 AND 4.8
- Platforms
- Windows 10 version 1809
- Windows 10 version 21H2
- Windows 10 version 22H2
- Windows Server 2019
- Windows Server 2022
- Default status
Unknown
Microsoft .NET Framework 3.5 AND 4.8 · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
| 4.8.0 | affected | custom | 2.0.50727.9073 AND 3.0.30729.9070 AND 4.8.4811.0 | Unavailable | None listed |
|---|
Microsoft .NET Framework 3.5 AND 4.8.1
- Vendor
- Microsoft
- Product
- Microsoft .NET Framework 3.5 AND 4.8.1
- Platforms
- Windows 10 version 21H2
- Windows 10 version 22H2
- Windows 11 version 23H2
- Windows 11 version 24H2
- Windows 11 version 25H2
- Windows 11 version 26H2
- Windows Server 2022
- Windows Server 2025
- Default status
Unknown
Microsoft .NET Framework 3.5 AND 4.8.1 · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
| 4.8.1 | affected | custom | 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 | Unavailable | None listed |
|---|
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2
- Vendor
- Microsoft
- Product
- Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2
- Platforms
- Windows Server 2012
- Windows Server 2012 R2
- Default status
Unknown
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
| 4.7.0 | affected | custom | 4.7.4150.0 | Unavailable | None listed |
|---|
Microsoft .NET Framework 4.8
- Vendor
- Microsoft
- Product
- Microsoft .NET Framework 4.8
- Platforms
- Windows 10 version 1607
- Windows Server 2012
- Windows Server 2012 R2
- Windows Server 2016
- Default status
Unknown
Microsoft .NET Framework 4.8 · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
| 4.8.0 | affected | custom | 4.8.4811.0 | Unavailable | None listed |
|---|
Microsoft .NET Framework 4.8.1
- Vendor
- Microsoft
- Product
- Microsoft .NET Framework 4.8.1
- Default status
Unknown
Microsoft .NET Framework 4.8.1 · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
| 4.8.0.0 | affected | custom | 4.8.9363.0 | Unavailable | None listed |
|---|
Microsoft Visual Studio 2022 version 17.14
- Vendor
- Microsoft
- Product
- Microsoft Visual Studio 2022 version 17.14
- Platforms
- Unknown
- Default status
Unknown
Microsoft Visual Studio 2022 version 17.14 · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
| 17.14.0 | affected | custom | 17.14.42 | Unavailable | None listed |
|---|
Microsoft Visual Studio 2026 version 18.10
- Vendor
- Microsoft
- Product
- Microsoft Visual Studio 2026 version 18.10
- Platforms
- Unknown
- Default status
Unknown
Microsoft Visual Studio 2026 version 18.10 · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
| 18.10.0 | affected | custom | 18.10.4 | Unavailable | None listed |
|---|
System.Security.Cryptography.Xml
- Vendor
- Microsoft
- Product
- System.Security.Cryptography.Xml
- Platforms
- .NET 8.0 runtime installed on Linux
- .NET 8.0 runtime installed on Mac OS
- .NET 8.0 runtime installed on Windows
- Default status
Unknown
System.Security.Cryptography.Xml · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
| 10.0.0 | affected | custom | 8.0.5 | Unavailable | None listed |
|---|
Windows 10 Version 1607
- Vendor
- Microsoft
- Product
- Windows 10 Version 1607
- Platforms
- 32-bit Systems
- x64-based Systems
- Default status
Unknown
Windows 10 Version 1607 · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
| 10.0.14393.0 | affected | custom | 10.0.14393.9612 | Unavailable | None listed |
|---|
Windows 10 Version 1809
- Vendor
- Microsoft
- Product
- Windows 10 Version 1809
- Platforms
- 32-bit Systems
- x64-based Systems
- Default status
Unknown
Windows 10 Version 1809 · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
| 10.0.17763.0 | affected | custom | 10.0.17763.9376 | Unavailable | None listed |
|---|
Windows Server 2012 R2
- Vendor
- Microsoft
- Product
- Windows Server 2012 R2
- Default status
Unknown
Windows Server 2012 R2 · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
| 6.3.9600.0 | affected | custom | 6.3.9600.23470 | Unavailable | None listed |
|---|
Windows Server 2012 R2 (Server Core installation)
- Vendor
- Microsoft
- Product
- Windows Server 2012 R2 (Server Core installation)
- Default status
Unknown
Windows Server 2012 R2 (Server Core installation) · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
| 6.3.9600.0 | affected | custom | 6.3.9600.23470 | Unavailable | None listed |
|---|
Windows Server 2016
- Vendor
- Microsoft
- Product
- Windows Server 2016
- Default status
Unknown
Windows Server 2016 · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
| 10.0.14393.0 | affected | custom | 10.0.14393.9612 | Unavailable | None listed |
|---|
Windows Server 2016 (Server Core installation)
- Vendor
- Microsoft
- Product
- Windows Server 2016 (Server Core installation)
- Default status
Unknown
Windows Server 2016 (Server Core installation) · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
| 10.0.14393.0 | affected | custom | 10.0.14393.9612 | Unavailable | None listed |
|---|
Windows Server 2019
- Vendor
- Microsoft
- Product
- Windows Server 2019
- Default status
Unknown
Windows Server 2019 · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
| 10.0.17763.0 | affected | custom | 10.0.17763.9376 | Unavailable | None listed |
|---|
Windows Server 2019 (Server Core installation)
- Vendor
- Microsoft
- Product
- Windows Server 2019 (Server Core installation)
- Default status
Unknown
Windows Server 2019 (Server Core installation) · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
| 10.0.17763.0 | affected | custom | 10.0.17763.9376 | Unavailable | None listed |
|---|
Windows Server 2022
- Vendor
- Microsoft
- Product
- Windows Server 2022
- Default status
Unknown
Windows Server 2022 · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
| 10.0.20348.0 | affected | custom | 10.0.20348.5761 | Unavailable | None listed |
|---|
Windows Server 2025
- Vendor
- Microsoft
- Product
- Windows Server 2025
- Default status
Unknown
Windows Server 2025 · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
| 10.0.26100.0 | affected | custom | 10.0.26100.33650 | Unavailable | None listed |
|---|
Windows Server 2025 (Server Core installation)
- Vendor
- Microsoft
- Product
- Windows Server 2025 (Server Core installation)
- Default status
Unknown
Windows Server 2025 (Server Core installation) · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
| 10.0.26100.0 | affected | custom | 10.0.26100.33650 | Unavailable | None listed |
|---|