cve 2026 50695

CVE 2026 50695 covers a vulnerability in Windows Active Directory Federation Services (AD FS) that can allow an unauthenticated, network-based denial-of-service attack. The flaw is described as a stack-based buffer overflow, enabling an attacker to send crafted data to a vulnerable federation server and disrupt service availability. Microsoft rated the issue Important and addressed it in the July 14, 2026 security updates. The available coverage also notes a CVSS score of 7.5 from the Zero Day Initiative, with no public disclosure or observed exploitation reported when the patches shipped. This tag collects guidance for organizations that rely on AD FS for federated sign-in.