Aller au contenu
en Se connecter
7.4 Élevée

CVE-2026-96222 Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacker to…

Description

Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.

Produits et versions touchés

Produit Versions touchées Corrigé en
Microsoft .NET Framework 3.5 3.5 3.5.0 → dernières Pas de correctif indiqué
Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 3.0 3.0.0.0 → dernières Pas de correctif indiqué
Microsoft .NET Framework 3.5 AND 4.7.2 4.7 4.7.0 → dernières Pas de correctif indiqué
Microsoft .NET Framework 3.5 AND 4.8 4.8 4.8.0 → dernières Pas de correctif indiqué
Microsoft .NET Framework 3.5 AND 4.8.1 4.8 4.8.1 → dernières Pas de correctif indiqué
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 4.7 4.7.0 → < 4.7.4150.0 4.7.4150.0
Microsoft .NET Framework 4.8 4.8 4.8.0 → < 4.8.4811.0 4.8.4811.0
Microsoft .NET Framework 4.8.1 4.8 4.8.0.0 → < 4.8.9363.0 4.8.9363.0
Microsoft Visual Studio 2022 version 17.14 17.14 17.14.0 → < 17.14.42 17.14.42
Afficher les 13 autres branches
Produit Versions touchées Corrigé en
Microsoft Visual Studio 2026 version 18.10 18.10 18.10.0 → < 18.10.4 18.10.4
System.Security.Cryptography.Xml 8.0 premières → < 8.0.5 8.0.5
Windows 10 Version 1607 10.0 10.0.14393.0 → < 10.0.14393.9612 10.0.14393.9612
Windows 10 Version 1809 10.0 10.0.17763.0 → < 10.0.17763.9376 10.0.17763.9376
Windows Server 2012 R2 6.3 6.3.9600.0 → < 6.3.9600.23470 6.3.9600.23470
Windows Server 2012 R2 (Server Core installation) 6.3 6.3.9600.0 → < 6.3.9600.23470 6.3.9600.23470
Windows Server 2016 10.0 10.0.14393.0 → < 10.0.14393.9612 10.0.14393.9612
Windows Server 2016 (Server Core installation) 10.0 10.0.14393.0 → < 10.0.14393.9612 10.0.14393.9612
Windows Server 2019 10.0 10.0.17763.0 → < 10.0.17763.9376 10.0.17763.9376
Windows Server 2019 (Server Core installation) 10.0 10.0.17763.0 → < 10.0.17763.9376 10.0.17763.9376
Windows Server 2022 10.0 10.0.20348.0 → < 10.0.20348.5761 10.0.20348.5761
Windows Server 2025 10.0 10.0.26100.0 → < 10.0.26100.33650 10.0.26100.33650
Windows Server 2025 (Server Core installation) 10.0 10.0.26100.0 → < 10.0.26100.33650 10.0.26100.33650

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Microsoft .NET Framework 3.5

Les 83 CVE de Microsoft .NET Framework 3.5 →
CVE-2026-97801 Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to perform tampering… 7.5 Élevée CVE-2026-58280 Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network 7.5 Élevée CVE-2026-97788 Observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attacker to disclose… 7.5 Élevée CVE-2026-96959 Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a… 7.5 Élevée
Suivre cette CVE