Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources, documents or advisories need attention: 271/271 feeds/APIs · 464/464 docs · 7/9 advisories · checked 10:44 UTC Customize Public modeDiscuss ChangeIntel on Discord
Advisory catalogCVE-2026-96222

Active Directory Federation Services (AD FS) Spoofing Vulnerability

Exact source revision recorded 23 Oct 2026 23:48:20 UTC. It does not establish the source's current position. Latest evidence.

cve-program · CVE-2026-96222

Published

Microsoft .NET Framework 3.5

Vendor product

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Microsoft",
                    "product": "Microsoft .NET Framework 3.5",
                    "platforms": [
                        "Windows 11 version 26H1",
                        "Windows Server 2012",
                        "Windows Server 2012 R2"
                    ],
                    "versions": [
                        {
                            "version": "3.5.0",
                            "lessThan": "2.0.50727.9188 AND 3.0.30729.9171",
                            "versionType": "custom",
                            "status": "affected"
                        }
                    ]
                }

Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2

Vendor product

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Microsoft",
                    "product": "Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2",
                    "platforms": [
                        "Windows 10 version 1607",
                        "Windows Server 2016",
                        "Windows Server 2019"
                    ],
                    "versions": [
                        {
                            "version": "3.0.0.0",
                            "lessThan": "2.0.50727.8987 AND 3.0.30729.8982 AND 4.7.4150.0",
                            "versionType": "custom",
                            "status": "affected"
                        }
                    ]
                }

Microsoft .NET Framework 3.5 AND 4.7.2

Vendor product

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Microsoft",
                    "product": "Microsoft .NET Framework 3.5 AND 4.7.2",
                    "platforms": [
                        "Windows 10 version 1809"
                    ],
                    "versions": [
                        {
                            "version": "4.7.0",
                            "lessThan": "2.0.50727.9073 AND 3.0.30729.9070 AND 4.7.4150.0",
                            "versionType": "custom",
                            "status": "affected"
                        }
                    ]
                }

Microsoft .NET Framework 3.5 AND 4.8

Vendor product

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Microsoft",
                    "product": "Microsoft .NET Framework 3.5 AND 4.8",
                    "platforms": [
                        "Windows 10 version 1809",
                        "Windows 10 version 21H2",
                        "Windows 10 version 22H2",
                        "Windows Server 2019",
                        "Windows Server 2022"
                    ],
                    "versions": [
                        {
                            "version": "4.8.0",
                            "lessThan": "2.0.50727.9073 AND 3.0.30729.9070 AND 4.8.4811.0",
                            "versionType": "custom",
                            "status": "affected"
                        }
                    ]
                }

Microsoft .NET Framework 3.5 AND 4.8.1

Vendor product

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Microsoft",
                    "product": "Microsoft .NET Framework 3.5 AND 4.8.1",
                    "platforms": [
                        "Windows 10 version 21H2",
                        "Windows 10 version 22H2",
                        "Windows 11 version 23H2",
                        "Windows 11 version 24H2",
                        "Windows 11 version 25H2",
                        "Windows 11 version 26H2",
                        "Windows Server 2022",
                        "Windows Server 2025"
                    ],
                    "versions": [
                        {
                            "version": "4.8.1",
                            "lessThan": "2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0",
                            "versionType": "custom",
                            "status": "affected"
                        }
                    ]
                }

Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2

Vendor product

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Microsoft",
                    "product": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2",
                    "platforms": [
                        "Windows Server 2012",
                        "Windows Server 2012 R2"
                    ],
                    "versions": [
                        {
                            "version": "4.7.0",
                            "lessThan": "4.7.4150.0",
                            "versionType": "custom",
                            "status": "affected"
                        }
                    ]
                }

Microsoft .NET Framework 4.8

Vendor product

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Microsoft",
                    "product": "Microsoft .NET Framework 4.8",
                    "platforms": [
                        "Windows 10 version 1607",
                        "Windows Server 2012",
                        "Windows Server 2012 R2",
                        "Windows Server 2016"
                    ],
                    "versions": [
                        {
                            "version": "4.8.0",
                            "lessThan": "4.8.4811.0",
                            "versionType": "custom",
                            "status": "affected"
                        }
                    ]
                }

Microsoft .NET Framework 4.8.1

Vendor product

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Microsoft",
                    "product": "Microsoft .NET Framework 4.8.1",
                    "platforms": [
                        "Windows 11 version 26H1"
                    ],
                    "versions": [
                        {
                            "version": "4.8.0.0",
                            "lessThan": "4.8.9363.0",
                            "versionType": "custom",
                            "status": "affected"
                        }
                    ]
                }

Microsoft Visual Studio 2022 version 17.14

Vendor product

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Microsoft",
                    "product": "Microsoft Visual Studio 2022 version 17.14",
                    "versions": [
                        {
                            "version": "17.14.0",
                            "lessThan": "17.14.42",
                            "versionType": "custom",
                            "status": "affected"
                        }
                    ]
                }

Microsoft Visual Studio 2026 version 18.10

Vendor product

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Microsoft",
                    "product": "Microsoft Visual Studio 2026 version 18.10",
                    "versions": [
                        {
                            "version": "18.10.0",
                            "lessThan": "18.10.4",
                            "versionType": "custom",
                            "status": "affected"
                        }
                    ]
                }

System.Security.Cryptography.Xml

Vendor product

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Microsoft",
                    "product": "System.Security.Cryptography.Xml",
                    "platforms": [
                        ".NET 8.0 runtime installed on Linux",
                        ".NET 8.0 runtime installed on Mac OS",
                        ".NET 8.0 runtime installed on Windows"
                    ],
                    "versions": [
                        {
                            "version": "10.0.0",
                            "lessThan": "8.0.5",
                            "versionType": "custom",
                            "status": "affected"
                        }
                    ]
                }

Windows 10 Version 1607

Vendor product

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Microsoft",
                    "product": "Windows 10 Version 1607",
                    "platforms": [
                        "32-bit Systems",
                        "x64-based Systems"
                    ],
                    "versions": [
                        {
                            "version": "10.0.14393.0",
                            "lessThan": "10.0.14393.9612",
                            "versionType": "custom",
                            "status": "affected"
                        }
                    ]
                }

Windows 10 Version 1809

Vendor product

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Microsoft",
                    "product": "Windows 10 Version 1809",
                    "platforms": [
                        "32-bit Systems",
                        "x64-based Systems"
                    ],
                    "versions": [
                        {
                            "version": "10.0.17763.0",
                            "lessThan": "10.0.17763.9376",
                            "versionType": "custom",
                            "status": "affected"
                        }
                    ]
                }

Windows Server 2012 R2

Vendor product

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Microsoft",
                    "product": "Windows Server 2012 R2",
                    "platforms": [
                        "x64-based Systems"
                    ],
                    "versions": [
                        {
                            "version": "6.3.9600.0",
                            "lessThan": "6.3.9600.23470",
                            "versionType": "custom",
                            "status": "affected"
                        }
                    ]
                }

Windows Server 2012 R2 (Server Core installation)

Vendor product

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Microsoft",
                    "product": "Windows Server 2012 R2 (Server Core installation)",
                    "platforms": [
                        "x64-based Systems"
                    ],
                    "versions": [
                        {
                            "version": "6.3.9600.0",
                            "lessThan": "6.3.9600.23470",
                            "versionType": "custom",
                            "status": "affected"
                        }
                    ]
                }

Windows Server 2016

Vendor product

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Microsoft",
                    "product": "Windows Server 2016",
                    "platforms": [
                        "x64-based Systems"
                    ],
                    "versions": [
                        {
                            "version": "10.0.14393.0",
                            "lessThan": "10.0.14393.9612",
                            "versionType": "custom",
                            "status": "affected"
                        }
                    ]
                }

Windows Server 2016 (Server Core installation)

Vendor product

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Microsoft",
                    "product": "Windows Server 2016 (Server Core installation)",
                    "platforms": [
                        "x64-based Systems"
                    ],
                    "versions": [
                        {
                            "version": "10.0.14393.0",
                            "lessThan": "10.0.14393.9612",
                            "versionType": "custom",
                            "status": "affected"
                        }
                    ]
                }

Windows Server 2019

Vendor product

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Microsoft",
                    "product": "Windows Server 2019",
                    "platforms": [
                        "x64-based Systems"
                    ],
                    "versions": [
                        {
                            "version": "10.0.17763.0",
                            "lessThan": "10.0.17763.9376",
                            "versionType": "custom",
                            "status": "affected"
                        }
                    ]
                }

Windows Server 2019 (Server Core installation)

Vendor product

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Microsoft",
                    "product": "Windows Server 2019 (Server Core installation)",
                    "platforms": [
                        "x64-based Systems"
                    ],
                    "versions": [
                        {
                            "version": "10.0.17763.0",
                            "lessThan": "10.0.17763.9376",
                            "versionType": "custom",
                            "status": "affected"
                        }
                    ]
                }

Windows Server 2022

Vendor product

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Microsoft",
                    "product": "Windows Server 2022",
                    "platforms": [
                        "x64-based Systems"
                    ],
                    "versions": [
                        {
                            "version": "10.0.20348.0",
                            "lessThan": "10.0.20348.5761",
                            "versionType": "custom",
                            "status": "affected"
                        }
                    ]
                }

Windows Server 2025

Vendor product

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Microsoft",
                    "product": "Windows Server 2025",
                    "platforms": [
                        "x64-based Systems"
                    ],
                    "versions": [
                        {
                            "version": "10.0.26100.0",
                            "lessThan": "10.0.26100.33650",
                            "versionType": "custom",
                            "status": "affected"
                        }
                    ]
                }

Windows Server 2025 (Server Core installation)

Vendor product

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Microsoft",
                    "product": "Windows Server 2025 (Server Core installation)",
                    "platforms": [
                        "x64-based Systems"
                    ],
                    "versions": [
                        {
                            "version": "10.0.26100.0",
                            "lessThan": "10.0.26100.33650",
                            "versionType": "custom",
                            "status": "affected"
                        }
                    ]
                }
ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 25 Oct 10:44 UTC · 271 of 271 readable · 269 fully read · documentation 464/464 current