Oct 2026: Active Directory Federation Services (AD FS) Information Disclosure Vulnerability
CVE-2026-97788 Published on October 13, 2026
Active Directory Federation Services (AD FS) Information Disclosure Vulnerability
Observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attacker to disclose information over a network.
Weakness Type
What is a Side Channel Attack Vulnerability?
The product behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor, which exposes security-relevant information about the state of the product, such as whether a particular operation was successful or not. Discrepancies can take many forms, and variations may be detectable in timing, control flow, communications such as replies or requests, or general behavior. These discrepancies can reveal information about the product's operation or internal state to an unauthorized actor. In some cases, discrepancies can be used by attackers to form a side channel.
CVE-2026-97788 has been classified to as a Side Channel Attack vulnerability or weakness.
Products Associated with CVE-2026-97788
Want to know whenever a new CVE is published for Microsoft products? stack.watch will email you.
Affected Versions
Microsoft .NET Framework 3.5:- Version 3.5.0 and below 2.0.50727.9188 AND 3.0.30729.9171 is affected.
- Version 3.0.0.0 and below 2.0.50727.8987 AND 3.0.30729.8982 AND 4.7.4150.0 is affected.
- Version 4.7.0 and below 2.0.50727.9073 AND 3.0.30729.9070 AND 4.7.4150.0 is affected.
- Version 4.8.0 and below 2.0.50727.9073 AND 3.0.30729.9070 AND 4.8.4811.0 is affected.
- Version 4.8.1 and below 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 is affected.
- Version 4.7.0 and below 4.7.4150.0 is affected.
- Version 4.8.0 and below 4.8.4811.0 is affected.
- Version 4.8.0.0 and below 4.8.9363.0 is affected.
- Version 10.0.14393.0 and below 10.0.14393.9612 is affected.
- Version 10.0.17763.0 and below 10.0.17763.9376 is affected.
- Version 10.0.19044.0 and below 10.0.19044.7807 is affected.
- Version 10.0.19045.0 and below 10.0.19044.7807 is affected.
- Version 10.0.22631.0 and below 10.0.22631.7652 is affected.
- Version 10.0.22631.0 and below 10.0.22631.7652 is affected.
- Version 10.0.26100.0 and below 10.0.26100.9711 is affected.
- Version 10.0.26200.0 and below 10.0.26200.9711 is affected.
- Version 10.0.28000.0 and below 10.0.28000.3231 is affected.
- Version 10.0.26300.0 and below 10.0.26300.9711 is affected.
- Version 6.2.9200.0 and below 6.2.9200.26434 is affected.
- Version 6.2.9200.0 and below 6.2.9200.26434 is affected.
- Version 6.3.9600.0 and below 6.3.9600.23470 is affected.
- Version 6.3.9600.0 and below 6.3.9600.23470 is affected.
- Version 10.0.14393.0 and below 10.0.14393.9612 is affected.
- Version 10.0.14393.0 and below 10.0.14393.9612 is affected.
- Version 10.0.17763.0 and below 10.0.17763.9376 is affected.
- Version 10.0.17763.0 and below 10.0.17763.9376 is affected.
- Version 10.0.20348.0 and below 10.0.20348.5761 is affected.
- Version 10.0.26100.0 and below 10.0.26100.33650 is affected.
- Version 10.0.26100.0 and below 10.0.26100.33650 is affected.