| CVE Number | Vulnerability | Product | Severity | Date |
|---|---|---|---|---|
| CVE-2026-96222 | Active Directory Federation Services (AD FS) Spoofing Vulnerability | Windows 10, Windows 11, Windows Server | Critical | 03-11-2026 |
Technical Information
An unauthenticated attacker could exploit improper certificate validation by leveraging weaknesses in certificate verification to spoof a trusted identity or service over the network, depending on the environment and security configuration.
Patch release date: Oct 13, 2026
Further information on this vulnerability is available at : CVE-2026-96222
Affected Software
System.Security.Cryptography.Xml on .NET 8.0 runtime installed on Windows,System.Security.Cryptography.Xml on .NET 8.0 runtime installed on Linux,
System.Security.Cryptography.Xml on .NET 8.0 runtime installed on Mac OS,
Windows 10 Version 1809 for 32-bit Systems,
Windows 10 Version 1809 for x64-based Systems,
Windows Server 2019,
Windows Server 2019 (Server Core installation),
Windows Server 2022,
Windows Server 2022 (Server Core installation),
Windows Server 2025 (Server Core installation),
Windows Server 2025,
Windows 10 Version 1607 for 32-bit Systems,
Windows 10 Version 1607 for x64-based Systems,
Windows Server 2016,
Windows Server 2016 (Server Core installation),
Windows Server 2012 R2,
Windows Server 2012 R2 (Server Core installation),
Microsoft Visual Studio 2026 version 18.10,
Microsoft Visual Studio 2022 version 17.14,
Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 version 21H2,
Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 version 22H2,
Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 version 24H2,
Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 version 25H2,
Microsoft .NET Framework 3.5 AND 4.8.1 on Windows Server 2025,
Microsoft .NET Framework 4.8.1 on Windows 11 version 26H1,
Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 version 23H2,
Microsoft .NET Framework 3.5 AND 4.8.1 on Windows Server 2022,
Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 version 26H2,
Microsoft .NET Framework 3.5 on Windows 11 version 26H1,
Microsoft .NET Framework 3.5 on Windows Server 2012,
Microsoft .NET Framework 3.5 on Windows Server 2012 R2,
Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows 10 version 1607,
Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2016,
Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2019,
Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 version 1809,
Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 version 1809,
Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 version 21H2,
Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 version 22H2,
Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2019,
Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2022,
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012,
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 R2,
Microsoft .NET Framework 4.8 on Windows 10 version 1607,
Microsoft .NET Framework 4.8 on Windows Server 2012,
Microsoft .NET Framework 4.8 on Windows Server 2012 R2,
Microsoft .NET Framework 4.8 on Windows Server 2016