Skip to content
fr Sign in
7.5 High

CVE-2026-97788 Observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attacker to disclose…

Description

Observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attacker to disclose information over a network.

Affected products and versions

Product Affected versions Fixed in
Microsoft .NET Framework 3.5 3.5 3.5.0 → latest No fix stated
Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 3.0 3.0.0.0 → latest No fix stated
Microsoft .NET Framework 3.5 AND 4.7.2 4.7 4.7.0 → latest No fix stated
Microsoft .NET Framework 3.5 AND 4.8 4.8 4.8.0 → latest No fix stated
Microsoft .NET Framework 3.5 AND 4.8.1 4.8 4.8.1 → latest No fix stated
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 4.7 4.7.0 → < 4.7.4150.0 4.7.4150.0
Microsoft .NET Framework 4.8 4.8 4.8.0 → < 4.8.4811.0 4.8.4811.0
Microsoft .NET Framework 4.8.1 4.8 4.8.0.0 → < 4.8.9363.0 4.8.9363.0
Windows 10 Version 1607 10.0 10.0.14393.0 → < 10.0.14393.9612 10.0.14393.9612
Show the 19 other branches
Product Affected versions Fixed in
Windows 10 Version 1809 10.0 10.0.17763.0 → < 10.0.17763.9376 10.0.17763.9376
Windows 10 Version 21H2 10.0 10.0.19044.0 → < 10.0.19044.7807 10.0.19044.7807
Windows 10 Version 22H2 10.0 10.0.19045.0 → < 10.0.19045.7807 10.0.19045.7807
Windows 11 Version 23H2 10.0 10.0.22631.0 → < 10.0.22631.7652 10.0.22631.7652
Windows 11 Version 24H2 10.0 10.0.26100.0 → < 10.0.26100.9711 10.0.26100.9711
Windows 11 Version 25H2 10.0 10.0.26200.0 → < 10.0.26200.9711 10.0.26200.9711
Windows 11 version 26H1 10.0 10.0.28000.0 → < 10.0.28000.3231 10.0.28000.3231
Windows 11 Version 26H2 10.0 10.0.26300.0 → < 10.0.26300.9711 10.0.26300.9711
Windows Server 2012 6.2 6.2.9200.0 → < 6.2.9200.26434 6.2.9200.26434
Windows Server 2012 (Server Core installation) 6.2 6.2.9200.0 → < 6.2.9200.26434 6.2.9200.26434
Windows Server 2012 R2 6.3 6.3.9600.0 → < 6.3.9600.23470 6.3.9600.23470
Windows Server 2012 R2 (Server Core installation) 6.3 6.3.9600.0 → < 6.3.9600.23470 6.3.9600.23470
Windows Server 2016 10.0 10.0.14393.0 → < 10.0.14393.9612 10.0.14393.9612
Windows Server 2016 (Server Core installation) 10.0 10.0.14393.0 → < 10.0.14393.9612 10.0.14393.9612
Windows Server 2019 10.0 10.0.17763.0 → < 10.0.17763.9376 10.0.17763.9376
Windows Server 2019 (Server Core installation) 10.0 10.0.17763.0 → < 10.0.17763.9376 10.0.17763.9376
Windows Server 2022 10.0 10.0.20348.0 → < 10.0.20348.5761 10.0.20348.5761
Windows Server 2025 10.0 10.0.26100.0 → < 10.0.26100.33650 10.0.26100.33650
Windows Server 2025 (Server Core installation) 10.0 10.0.26100.0 → < 10.0.26100.33650 10.0.26100.33650

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Microsoft .NET Framework 3.5

The 83 CVEs of Microsoft .NET Framework 3.5 →
CVE-2026-97801 Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to perform tampering… 7.5 High CVE-2026-58280 Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network 7.5 High CVE-2026-96958 Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network 7.5 High CVE-2026-96960 Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network 7.5 High
Track this CVE