CVE WatchOct 13, 2026

CVE-2026-85319

Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny

CVSS

7.5

High

EPSS

—

KEV

—

Exploit Today

0-100

Published: Oct 13, 2026 · Last modified: Oct 13, 2026 · CWE-770

EPSS · 30d

Not enough EPSS history yet.

Technical description

Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.

Official references

msrc.microsoft.comhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85319

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-880845.3 MED

—

——0Allocation of resources without limits or throttling in SQL Server allows an authorized attacker to deny service over a network.18h CVE-2026-969597.5 HIG

—

——0Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.21h CVE-2026-963005.9 MED

—

——0Uncontrolled resource consumption in RPC Endpoint Mapper Service allows an unauthorized attacker to deny service over a network.21h CVE-2026-962367.5 HIG

—

——0Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.21h CVE-2026-853217.5 HIG

—

——0Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.20h CVE-2026-836457.5 HIG

—

——0Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.20h