CVE-2026-50684

نوع الضعف

Improper neutralization of input during web page generation ('cross-site scripting') in Active Directory Federation Services (AD FS) allows an authorized attacker to perform spoofing over a network.

المنتجات المتأثرة

• microsoft windows_10_1607
• microsoft windows_10_1809
• microsoft windows_server_2012
• microsoft windows_server_2016
• microsoft windows_server_2019
• microsoft windows_server_2022
• microsoft windows_server_2025

المراجع

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50684