CVE-2026-50653: Azure Active Directory Denial of Service Vulnerability
Published Jul 14, 2026
·Updated
Azure Active Directory Denial of Service Vulnerability
Other sources
Loop with unreachable exit condition ('infinite loop') in Azure Active Directory allows an unauthorized attacker to deny service over a network.
— Microsoft
Affected Software
94 affected componentsFixes available
Microsoft Azure Active Directory<8.19.2, <7.7.3, <5.7.1
8.19.27.7.35.7.1
Microsoft .NET Framework=3.5
2.0.50727.8983 & 3.0.30729.8978
Microsoft .NET Framework=3.5
2.0.50727.8983 & 3.0.30729.8978
Microsoft .NET Framework=3.5, =4.8.1
2.0.50727.9182 & 3.0.30729.9168
Microsoft .NET Framework=3.5, =4.8.1
2.0.50727.9182 & 3.0.30729.9168 & 4.8.9340.0
Microsoft .NET Framework=3.5, =4.8.1
2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0
Microsoft .NET Framework=3.5, =4.8.1
2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0
Microsoft .NET Framework=3.5, =4.8.1
2.0.50727.9182 & 3.0.30729.9168 & 4.8.9340.0
Microsoft .NET Framework=3.5, =4.8.1
2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0
Microsoft .NET Framework=4.6.2, =4.7, =4.7.1, =4.7.2
4.7.4143.0
Microsoft .NET Framework=3.5, =4.7.2
2.0.50727.8983 & 3.0.30729.8978 & 4.7.4143.0
Microsoft .NET Framework=4.6.2, =4.7, =4.7.1, =4.7.2
4.7.4143.0
Microsoft .NET Framework=3.5, =4.7.2
2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0
Microsoft .NET Framework=3.5, =4.8
2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0
Microsoft .NET Framework=3.5, =4.8
2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0
Microsoft .NET Framework=3.5, =4.8
2.0.50727.9069 & 3.0.30729.9067 & 4.8.4803.0
Microsoft .NET Framework=4.8
4.8.4803.0
Microsoft .NET Framework=4.8
4.8.4803.0
Microsoft .NET Framework=4.8
4.8.4803.0
Microsoft .NET Framework=3.5
2.0.50727.9182 & 3.0.30729.9168
Microsoft .NET Framework=4.8.1
4.8.9340.0
All of the following
Microsoft .NET Framework=3.5
Any of the following
Microsoft Windows 10 1607
Microsoft Windows 10 1607
Microsoft Windows 10 1809
Microsoft Windows 10 1809
Microsoft Windows 10 21h2
Microsoft Windows 10 21h2
Microsoft Windows 10 21h2
Microsoft Windows 10 22h2
Microsoft Windows 10 22h2
Microsoft Windows 10 22h2
Microsoft Windows 11 23h2
Microsoft Windows 11 23h2
Microsoft Windows 11 24h2
Microsoft Windows 11 24h2
Microsoft Windows 11 25h2
Microsoft Windows 11 26h1
Microsoft Windows 11 26h1
Microsoft Windows Server 2012
Microsoft Windows Server 2012=r2
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft Windows Server 2022
All of the following
Microsoft .NET Framework=4.8.1
Any of the following
Microsoft Windows 10 21h2
Microsoft Windows 10 21h2
Microsoft Windows 10 21h2
Microsoft Windows 10 22h2
Microsoft Windows 10 22h2
Microsoft Windows 10 22h2
Microsoft Windows 11 23h2
Microsoft Windows 11 23h2
Microsoft Windows 11 24h2
Microsoft Windows 11 24h2
Microsoft Windows 11 25h2
Microsoft Windows 11 26h1
Microsoft Windows 11 26h1
Microsoft Windows Server 2022
All of the following
Microsoft .NET Framework=4.6.2
Any of the following
Microsoft Windows Server 2012
Microsoft Windows Server 2012=r2
All of the following
Microsoft .NET Framework=4.7
Any of the following
Microsoft Windows Server 2012
Microsoft Windows Server 2012=r2
All of the following
Microsoft .NET Framework=4.7.1
Any of the following
Microsoft Windows Server 2012
Microsoft Windows Server 2012=r2
All of the following
Microsoft .NET Framework=4.7.2
Any of the following
Microsoft Windows 10 1607
Microsoft Windows 10 1607
Microsoft Windows 10 1809
Microsoft Windows 10 1809
Microsoft Windows Server 2012
Microsoft Windows Server 2012=r2
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft Azure Active Directory
All of the following
Microsoft .NET Framework=4.8
Any of the following
Microsoft Windows 10 1607
Microsoft Windows 10 1607
Microsoft Windows 10 1809
Microsoft Windows 10 1809
Microsoft Windows 10 21h2
Microsoft Windows 10 21h2
Microsoft Windows 10 21h2
Microsoft Windows 10 22h2
Microsoft Windows 10 22h2
Microsoft Windows 10 22h2
Microsoft Windows Server 2012
Microsoft Windows Server 2012=r2
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft Windows Server 2022
Remediation
Event History
Jul 14, 2026
CVE Published
via Microsoft·02:00 PM
Data Sourced
via Microsoft·02:00 PM
DescriptionSeverityWeaknessAffected Software
Updated
via Microsoft·02:00 PM
Affected Software
Updated
via Microsoft·02:00 PM
Description
CVE Published
via MITRE·05:05 PM
Data Sourced
via MITRE·05:05 PM
DescriptionSeverity
Data Sourced
via NVD·05:17 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-50653?
The severity of CVE-2026-50653 is categorized as high with a score of 7.5.
2
How does CVE-2026-50653 impact Azure Active Directory?
CVE-2026-50653 creates a denial of service condition that can prevent access to Azure Active Directory services.
3
Who is affected by CVE-2026-50653?
Organizations using Microsoft Azure Active Directory may be affected by CVE-2026-50653.
4
What is the nature of the vulnerability CVE-2026-50653?
CVE-2026-50653 is an infinite loop vulnerability due to an unreachable exit condition.
5
How can I mitigate CVE-2026-50653?
To mitigate CVE-2026-50653, update to the latest version of Microsoft .NET Framework and Microsoft Azure Active Directory as recommended by the vendor.