ad fs security

This ad fs security tag covers a Microsoft security fix for an information-disclosure vulnerability in Active Directory Federation Services (AD FS). The tagged discussion focuses on CVE-2026-58529, an out-of-bounds read affecting Windows 11 version 26H1. Microsoft rates the issue High, with a CVSS 3.1 score of 7.1, and describes a network-based attack requiring an authorized attacker. KB5101649 addresses the flaw and updates affected systems to OS Build 28000.2525; earlier 28000 builds are identified as vulnerable. Use this page to follow the specific Windows update and security context associated with the ad fs security tag.