# CVE-2026-50304: Microsoft Active Directory Federation Services stack overflow DoS

Source: https://junglewise.ai/threats/cve-2026-50304-microsoft-active-directory-federation-services-stack-overflow-dos  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-07-14. Updated: 2026-07-14  
License: CC BY 4.0 with a link back

CVE-2026-50304 · Severity: high · CVSS 7.5 · Published 2026-07-14

A vulnerability in Microsoft's Active Directory Federation Services (AD FS) allows an unauthorized person to crash the service remotely. AD FS is a critical component used for single sign-on and identity management across different applications. If exploited, this would prevent users from logging into corporate systems and services, causing a significant disruption to business operations.

Technologies: [Microsoft Active Directory Federation Services](https://junglewise.ai/threats/technologies/active-directory-federation-services). Vendors: [Microsoft](https://junglewise.ai/threats/vendors/microsoft).

## Quick answers

**Is CVE-2026-50304 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-50304 being exploited in the wild.

**How severe is CVE-2026-50304?** High severity, with a CVSS score of 7.5, published 14 July 2026.

**Which products and versions are affected?** Microsoft Active Directory Federation Services Windows Server 2012, 2012 R2, 2016, 2019; Windows 10 1607, 1809.

**Is there a fix for CVE-2026-50304?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-50304 attacked?** It is attacked over the network, in an operating system.

**Am I affected by CVE-2026-50304?** Check whether you run Microsoft Active Directory Federation Services at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A stack-based buffer overflow (CWE-121) exists in Microsoft Active Directory Federation Services (AD FS). The vulnerability is reachable over the network without authentication (AV:N/AC:L/PR:N/UI:N). An attacker can exploit this flaw by sending specially crafted requests to the AD FS endpoint, leading to a service crash and denial-of-service (DoS). The issue affects multiple versions of Windows Server and Windows 10. Microsoft has released security updates to address this vulnerability.

## Affected products

- Microsoft Active Directory Federation Services (AD FS) Windows Server 2012, 2012 R2, 2016, 2019; Windows 10 1607, 1809

## Timeline

- 2026-07-14: disclosed
- 2026-07-14: advisory

## References

- [https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50304](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50304)

## Related threats

- [Microsoft Active Directory Federation Services information disclosure](https://junglewise.ai/threats/cve-2026-97788-observable-discrepancy-in-active-directory-federation-services-ad)
- [Microsoft Active Directory Federation Services cryptographic signature verification bypass](https://junglewise.ai/threats/cve-2026-96252-improper-verification-of-cryptographic-signature-in-active)
- [Microsoft Active Directory Federation Services memory allocation denial of service](https://junglewise.ai/threats/cve-2026-85324-memory-allocation-with-excessive-size-value-in-active-directory)
- [Microsoft Active Directory Federation Services resource exhaustion denial of service](https://junglewise.ai/threats/cve-2026-85319-allocation-of-resources-without-limits-or-throttling-in-active)
- [Microsoft Active Directory Federation Services weak authentication](https://junglewise.ai/threats/cve-2026-83674-weak-authentication-in-active-directory-federation-services-ad-fs)