7.5
High
CVE-2026-50652 Deserialization of untrusted data in Azure Active Directory allows an unauthorized attacker to deny service over a…
Description
Deserialization of untrusted data in Azure Active Directory allows an unauthorized attacker to deny service over a network.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Azure Active Directory 5.7 | earliest → < 5.7.1 | 5.7.1 |
| Microsoft .NET Framework 3.5 3.5 | 3.5.0 → latest | No fix stated |
| Microsoft .NET Framework 3.5 AND 4.7.2 4.7 | 4.7.0 → latest | No fix stated |
| Microsoft .NET Framework 3.5 AND 4.8 4.8 | 4.8.0 → latest | No fix stated |
| Microsoft .NET Framework 3.5 AND 4.8.1 4.8 | 4.8.1 → latest | No fix stated |
| Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 4.7 | 4.7.0 → < 4.7.4143.0 | 4.7.4143.0 |
| Microsoft .NET Framework 4.8 4.8 | 4.8.0 → < 4.8.4803.0 | 4.8.4803.0 |
| Microsoft .NET Framework 4.8.1 4.8 | 4.8.0.0 → < 4.8.9340.0 | 4.8.9340.0 |
References
- Azure Active Directory Denial of Service Vulnerability msrc.microsoft.com
Timeline
- Published
- Last modified
Other CVEs of Azure Active Directory
The 5 CVEs of Azure Active Directory →
CVE-2026-50481
Modification of assumed-immutable data (maid) in Azure Active Directory allows an authorized attacker to elevate…
9.9
Critical
CVE-2026-50653
Loop with unreachable exit condition ('infinite loop') in Azure Active Directory allows an unauthorized attacker to deny…
7.5
High
CVE-2026-45480
Improper authentication in Azure Active Directory allows an unauthorized attacker to elevate privileges over a network
10.0
Critical
CVE-2021-42306
An information disclosure vulnerability manifests when a user or an application uploads unprotected private key data…
8.1
High