cve 2026 50411

The cve 2026 50411 tag covers Microsoft’s security update for a remotely reachable denial-of-service vulnerability in Active Directory Federation Services (AD FS) on Windows Server. The flaw is described as a stack-based buffer overflow that an unauthenticated attacker can trigger over the network without privileges or user interaction. Microsoft rates it as a high-impact availability issue with a CVSS 3.1 base score of 7.5. Content under this tag focuses on the July 14, 2026 Microsoft Security Response Center disclosure and the need to prioritize patching where AD FS supports an organization’s authentication path.