Microsoft Active Directory Federation Server Spoofing Vulnerability

A spoofing vulnerability has been identified in Active Directory Federation Server. This vulnerability allows an attacker to manipulate user interactions in a way that could lead to unauthorized actions being performed on behalf of the user.

Impact

Exploitation of this vulnerability could lead to unauthorized actions being performed by users, potentially allowing attackers to bypass security controls or impersonate users.

Remediation

Users can apply the security update KB5049993 for Windows Server 2016, KB5050009 for Windows Server 2025, KB5049984 for Windows Server 2022 (23H2 Edition, Server Core installation), KB5049983 for Windows Server 2022, and KB5050008 for Windows Server 2019. These security updates are available through the Microsoft Update Catalog.