Azure Active Directory Denial of Service Vulnerability
🔗 CVE IDs covered (1)
📋 Description
Loop with unreachable exit condition ('infinite loop') in Azure Active Directory allows an unauthorized attacker to deny service over a network.
🎯 Affected products55
- Azure Active Directory
- Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1607 for 32-bit Systems
- Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1607 for x64-based Systems
- Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for 32-bit Systems
- Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for x64-based Systems
- Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2016
- Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2016 (Server Core installation)
- Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2019
- Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2019 (Server Core installation)
- Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for 32-bit Systems
- Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for x64-based Systems
- Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 21H2 for 32-bit Systems
- Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 21H2 for ARM64-based Systems
- Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 21H2 for x64-based Systems
- Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 22H2 for 32-bit Systems
- Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 22H2 for ARM64-based Systems
- Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 22H2 for x64-based Systems
- Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2019
- Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2019 (Server Core installation)
- Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2022
- Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2022 (Server Core installation)
- Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 Version 21H2 for 32-bit Systems
- Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 Version 21H2 for ARM64-based Systems
- Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 Version 21H2 for x64-based Systems
- Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 Version 22H2 for 32-bit Systems
- Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 Version 22H2 for ARM64-based Systems
- Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 Version 22H2 for x64-based Systems
- Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 23H2 for ARM64-based Systems
- Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 23H2 for x64-based Systems
- Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 24H2 for ARM64-based Systems
- +25 more not shown
✅ Remediation
KBRelease Notes (Security Update) — fixed build 8.19.2 KBRelease Notes (Security Update) — fixed build 7.7.3 KBRelease Notes (Security Update) — fixed build 5.7.1 KB5101014 (Security Update) — fixed build 2.0.50727.9182 & 3.0.30729.9168 KB5101002 (Security Update) — fixed build 4.8.9340.0 KB5101007 (Security Update) — fixed build 4.8.4803.0 KB5101009 (Security Update) — fixed build 4.8.4803.0 KB5101011 (Security Update) — fixed build 4.8.4803.0 KB5101008 (Security Update) — fixed build 2.0.50727.9069 & 3.0.30729.9067 & 4.8.4803.0 KB5101010 (Security Update) — fixed build 2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0 KB5101006 (Security Update) — fixed build 2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0 KB5100989 (Security Update) — fixed build 2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0 KB5099535 (Security Update) — fixed build 2.0.50727.8983 & 3.0.30729.8978 & 4.7.4143.0 KB5100990 (Security Update) — fixed build 4.7.4143.0 KB5100991 (Security Update) — fixed build 4.7.4143.0 KB5101005 (Security Update) — fixed build 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0 KB5101000 (Security Update) — fixed build 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0 KB5100998 (Security Update) — fixed build 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9340.0 KB5101004 (Security Update) — fixed build 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0 KB5101001 (Security Update) — fixed build 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0 KB5100984 (Security Update) — fixed build 2.0.50727.8983 & 3.0.30729.8978 KB5100985 (Security Update) — fixed build 2.0.50727.8983 & 3.0.30729.8978
🔗 References (43)
- advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50653
- patchhttps://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/releases/tag/8.19.2
- referencehttps://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/blob/dev/CHANGELOG.md
- patchhttps://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/releases/tag/7.7.3
- patchhttps://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/releases/tag/5.7.1
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101014
- referencehttps://support.microsoft.com/help/5101014
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101002
- referencehttps://support.microsoft.com/help/5101002
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101007
- referencehttps://support.microsoft.com/help/5101007
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101009
- referencehttps://support.microsoft.com/help/5101009
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101011
- referencehttps://support.microsoft.com/help/5101011
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101008
- referencehttps://support.microsoft.com/help/5101008
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101010
- referencehttps://support.microsoft.com/help/5101010
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101006
- referencehttps://support.microsoft.com/help/5101006
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100989
- referencehttps://support.microsoft.com/help/5100989
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535
- referencehttps://support.microsoft.com/help/5099535
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100990
- referencehttps://support.microsoft.com/help/5100990
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100991
- referencehttps://support.microsoft.com/help/5100991
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101005
- referencehttps://support.microsoft.com/help/5101005
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101000
- referencehttps://support.microsoft.com/help/5101000
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100998
- referencehttps://support.microsoft.com/help/5100998
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101004
- referencehttps://support.microsoft.com/help/5101004
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101001
- referencehttps://support.microsoft.com/help/5101001
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100984
- referencehttps://support.microsoft.com/help/5100984
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100985
- referencehttps://support.microsoft.com/help/5100985