CVE-2026-97788
CVE-2026-97788 · Active Directory Federation Services (AD FS) Information Disclosure Vulnerability
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
Observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attacker to disclose information over a network.
CVSS 7.5 · High · EPSS 0.7% · Fix available
- Published
- Updated
Affected products and versions
microsoft .net framework 3.5
- Versions
- ≥ 3.5.0, < 2.0.50727.9188 AND 3.0.30729.9171: Affected (custom)
No fix published
microsoft .net framework 3.5 and 4.6.2/4.7/4.7.1/4.7.2
- Versions
- ≥ 3.0.0.0, < 2.0.50727.8987 AND 3.0.30729.8982 AND 4.7.4150.0: Affected (custom)
No fix published
microsoft .net framework 3.5 and 4.7.2
- Versions
- ≥ 4.7.0, < 2.0.50727.9073 AND 3.0.30729.9070 AND 4.7.4150.0: Affected (custom)
No fix published
microsoft .net framework 3.5 and 4.8
- Versions
- ≥ 4.8.0, < 2.0.50727.9073 AND 3.0.30729.9070 AND 4.8.4811.0: Affected (custom)
No fix published
microsoft .net framework 3.5 and 4.8.1
- Versions
- ≥ 4.8.1, < 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0: Affected (custom)
No fix published
microsoft .net framework 4.6.2/4.7/4.7.1/4.7.2
- Versions
- ≥ 4.7.0, < 4.7.4150.0: Affected (custom)
Update to 4.7.4150.0
microsoft .net framework 4.8
- Versions
- ≥ 4.8.0, < 4.8.4811.0: Affected (custom)
Update to 4.8.4811.0
microsoft .net framework 4.8.1
- Versions
- ≥ 4.8.0.0, < 4.8.9363.0: Affected (custom)
Update to 4.8.9363.0
windows 10 version 1607
- Versions
- ≥ 10.0.14393.0, < 10.0.14393.9612: Affected (custom)
Update to 10.0.14393.9612
windows 10 version 1809
- Versions
- ≥ 10.0.17763.0, < 10.0.17763.9376: Affected (custom)
Update to 10.0.17763.9376
windows 10 version 21h2
- Versions
- ≥ 10.0.19044.0, < 10.0.19044.7807: Affected (custom)
Update to 10.0.19044.7807
windows 10 version 22h2
- Versions
- ≥ 10.0.19045.0, < 10.0.19045.7807: Affected (custom)
Update to 10.0.19045.7807
windows 11 version 23h2
- Versions
- ≥ 10.0.22631.0, < 10.0.22631.7652: Affected (custom)
Update to 10.0.22631.7652
windows 11 version 24h2
- Versions
- ≥ 10.0.26100.0, < 10.0.26100.9711: Affected (custom)
Update to 10.0.26100.9711
windows 11 version 25h2
- Versions
- ≥ 10.0.26200.0, < 10.0.26200.9711: Affected (custom)
Update to 10.0.26200.9711
windows 11 version 26h1
- Versions
- ≥ 10.0.28000.0, < 10.0.28000.3231: Affected (custom)
Update to 10.0.28000.3231
windows 11 version 26h2
- Versions
- ≥ 10.0.26300.0, < 10.0.26300.9711: Affected (custom)
Update to 10.0.26300.9711
windows server 2012
- Versions
- ≥ 6.2.9200.0, < 6.2.9200.26434: Affected (custom)
Update to 6.2.9200.26434
windows server 2012 (server core installation)
- Versions
- ≥ 6.2.9200.0, < 6.2.9200.26434: Affected (custom)
Update to 6.2.9200.26434
windows server 2012 r2
- Versions
- ≥ 6.3.9600.0, < 6.3.9600.23470: Affected (custom)
Update to 6.3.9600.23470
windows server 2012 r2 (server core installation)
- Versions
- ≥ 6.3.9600.0, < 6.3.9600.23470: Affected (custom)
Update to 6.3.9600.23470
windows server 2016
- Versions
- ≥ 10.0.14393.0, < 10.0.14393.9612: Affected (custom)
Update to 10.0.14393.9612
windows server 2016 (server core installation)
- Versions
- ≥ 10.0.14393.0, < 10.0.14393.9612: Affected (custom)
Update to 10.0.14393.9612
windows server 2019
- Versions
- ≥ 10.0.17763.0, < 10.0.17763.9376: Affected (custom)
Update to 10.0.17763.9376