Skip to content
OpenAdvisories
Critical MSRC-CVE-2026-96222 1 CVE

Active Directory Federation Services (AD FS) Spoofing Vulnerability

Published Oct 13, 2026 · Updated Oct 16, 2026 · Revision 2

Vendor: Microsoft

Summary

Impact: Spoofing. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?
Successful exploitation of this vulnerability requires an attacker to have a deep understanding of the system. Successful exploitation is not guaranteed and depends on a combination of factors that might include the environment, system configuration, and the presence of additional security measures.

Security updates
8.0.5 — https://github.com/dotnet/announcements/issues/474
10.0.17763.9376 — https://support.microsoft.com/help/5126651
10.0.20348.5761 — https://support.microsoft.com/help/5126655
10.0.26100.33650 — https://support.microsoft.com/help/5126646
10.0.14393.9612 — https://support.microsoft.com/help/5126868
6.3.9600.23470 — https://support.microsoft.com/help/5126836
18.10.4 — https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-notes
17.14.42 — https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes
2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 — https://support.microsoft.com/help/5127689
2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 — https://support.microsoft.com/help/5127690
4.8.9363.0 — https://support.microsoft.com/help/5127691
2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 — https://support.microsoft.com/help/5127692
2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 — https://support.microsoft.com/help/5127693
2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.10008.0 — https://support.microsoft.com/help/5127694
2.0.50727.9188 AND 3.0.30729.9171 — https://support.microsoft.com/help/5127696
2.0.50727.8987 AND 3.0.30729.8982 — https://support.microsoft.com/help/5127660
2.0.50727.8987 AND 3.0.30729.8982 — https://support.microsoft.com/help/5127664
2.0.50727.9073 AND 3.0.30729.9070 AND 4.7.4150.0 — https://support.microsoft.com/help/5127666
2.0.50727.9073 AND 3.0.30729.9070 AND 4.8.4811.0 — https://support.microsoft.com/help/5127685
2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.4811.0 — https://support.microsoft.com/help/5127683
2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.4811.0 — https://support.microsoft.com/help/5127687
4.7.4150.0 — https://support.microsoft.com/help/5127667
4.7.4150.0 — https://support.microsoft.com/help/5127668
4.8.4811.0 — https://support.microsoft.com/help/5127684
4.8.4811.0 — https://support.microsoft.com/help/5127686

Vulnerabilities 1

Revision history

  1. #2

    Updated the Security Updates table to add download and KB article links for Microsoft Visual Studio. This is an informational change only; the fixed builds are unchanged.

  2. #1

    Information published.

References