Skip to content
VulniPulse
Sign in
Advisory severityHigh7.4Vendor: CriticalMicrosoft Server

High [CVE-2026-96222] Active Directory Federation Services (AD FS) Spoofing Vulnerability

This high-severity Microsoft Server advisory covers CVE-2026-96222 affecting Windows Server 2019, Windows Server 2016, Windows Server 2012 R2.

Aggregated and source-linked by VulniPulse. Data sources, validation and limitations.

CVE-2026-96222 Source published Source updated

VulniPulse record published Record updated

CVE-2026-96222
Affected products & platforms
Microsoft ServerWindows Server
Open source advisory

Android app · Google Play

Monitor future Microsoft Server CVEs from your phone.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.

Matching phone alertsOptional email delivery
Get CVE alertsSee app features

Summary

Active Directory Federation Services (AD FS) Spoofing Vulnerability

Affected products named by the advisory: Windows Server 2019; Windows Server 2022; Windows Server 2025; Windows Server 2016; and 4 more.

Affected products named by the advisory: Windows Server 2012 R2; Microsoft .NET Framework 3.5 AND 4.8.1 on Windows Server 2025; Microsoft .NET Framework 3.5 AND 4.8.1 on Windows Server 2022; Microsoft .NET Framework 3.5 on Windows Server 2012.

Affected versions
  • Microsoft .NET Framework 3.5 3.5.0 before 2.0.50727.9188 AND 3.0.30729.9171
  • Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 3.0.0.0 before 2.0.50727.8987 AND 3.0.30729.8982 AND 4.7.4150.0
  • Microsoft .NET Framework 3.5 AND 4.7.2 4.7.0 before 2.0.50727.9073 AND 3.0.30729.9070 AND 4.7.4150.0
  • Microsoft .NET Framework 3.5 AND 4.8 4.8.0 before 2.0.50727.9073 AND 3.0.30729.9070 AND 4.8.4811.0
  • Microsoft .NET Framework 3.5 AND 4.8.1 4.8.1 before 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0
  • Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 4.7.0 before 4.7.4150.0
  • Microsoft .NET Framework 4.8 4.8.0 before 4.8.4811.0
  • Microsoft .NET Framework 4.8.1 4.8.0.0 before 4.8.9363.0
  • Microsoft Visual Studio 2022 version 17.14 17.14.0 before 17.14.42
  • Microsoft Visual Studio 2026 version 18.10 18.10.0 before 18.10.4
  • System.Security.Cryptography.Xml 10.0.0 before 8.0.5
  • Windows 10 Version 1607 10.0.14393.0 before 10.0.14393.9612

Official advisory · high-confidence parse· fetched 7 days ago·verify at source

Fixed versions
  • KB5126651 (build 10.0.17763.9376)
  • KB5126655 (build 10.0.20348.5761)
  • KB5126646 (build 10.0.26100.33650)
  • KB5126868 (build 2.0.50727.8987 AND 3.0.30729.8982 AND 4.7.4150.0)
  • KB5126836 (build 6.3.9600.23470)
  • KB5127689 (build 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0)
  • KB5127690 (build 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0)
  • KB5127691 (build 4.8.9363.0)

Official advisory · high-confidence parse· fetched 7 days ago·verify at source

Mitigation checklist

Recommended fix / mitigation
  • Install the applicable security update for your platform: KB5126651, KB5126655, KB5126646, KB5126868, KB5126836, KB5127689 (see the Microsoft Update Catalog).

Official advisory · high-confidence parse· fetched 7 days ago·verify at source

Discussion(0)

No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.

Sign in to join the discussion.