CVE-2026-50324: falha de média gravidade em Microsoft .NET Framework 3.5 AND 4.7.2
Windows Active Directory Federation Services Denial of Service Vulnerability
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.9epss 0.9%
Loop with unreachable exit condition ('infinite loop') in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
Produtos afetados
Microsoft · Microsoft .NET Framework 3.5 AND 4.7.2Microsoft · Microsoft .NET Framework 3.5 AND 4.8Microsoft · Microsoft .NET Framework 3.5 AND 4.8.1Microsoft · Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2Microsoft · Microsoft .NET Framework 4.8Microsoft · Microsoft .NET Framework 4.8.1Microsoft · Windows 10 Version 1607Microsoft · Windows 10 Version 1809Microsoft · Windows Server 2012 R2Microsoft · Windows Server 2012 R2 (Server Core installation)Microsoft · Windows Server 2016Microsoft · Windows Server 2016 (Server Core installation)Microsoft · Windows Server 2019Microsoft · Windows Server 2019 (Server Core installation)Microsoft · Windows Server 2022Microsoft · Windows Server 2025Microsoft · Windows Server 2025 (Server Core installation)CVEs relacionadas — Microsoft .NET Framework 3.5 AND 4.7.2
No mesmo produto, das mais perigosas para as menos.
CVE-2024-29059HIGH.NET Framework Information Disclosure VulnerabilityEPSS 98.6%KEVCVE-2023-36899HIGHASP.NET Elevation of Privilege VulnerabilityEPSS 76.7%CVE-2023-36049HIGH.NET, .NET Framework, and Visual Studio Elevation of Privilege VulnerabilityEPSS 6.8%CVE-2020-1108—.NET Core & .NET Framework Denial of Service VulnerabilityEPSS 6.5%CVE-2026-50649HIGH.NET Remote Code Execution VulnerabilityEPSS 4.0%CVE-2026-50646HIGH.NET Framework Remote Code Execution VulnerabilityEPSS 4.0%