PT-2026-58504 · Microsoft · Windows 10 Version 1607+7

Publicado 2026-07-14 · Atualizado 2026-07-14 · CVE-2026-50684

NVD

CVSS v3.1

4.8

Média

Vetor base

AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Improper neutralization of input during web page generation ('cross-site scripting') in Active Directory Federation Services (AD FS) allows an authorized attacker to perform spoofing over a network.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2026-50684

Produtos afetados

Windows 10 Version 1607

Windows 10 Version 1809

Windows Server 2012

Windows Server 2012 R2

Windows Server 2016

Windows Server 2019

Windows Server 2022

Windows Server 2025

Referências · 2

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50684 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2026-50684 · Nota de Segurança