Active Directory Federation Services
No CISA KEV deadline is open. CISA last added a Active Directory Federation Services CVE on 14 Jul.
Tracked since 14 Jul · latest article Wed 15 Jul · RSS
Exploited, by due date
CSV downloadDeadlines passed
7 articles from 6 outlets since 14 Jul; the latest 102 days ago.
- Article
- First report
- Official notice
Show as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Wed 15 Jul · 19:20 UTC | SecurityOnline | Microsoft, SonicWall bugs found; RabbitMQ patches auth flaws |
| Wed 15 Jul · 12:41 UTC | Malwarebytes | Microsoft patches 622 flaws, fixes three critical zero day bugs |
| Wed 15 Jul · 00:50 UTC | SecurityOnline | Microsoft patches 570 flaws, two zero days actively exploited |
| Tue 14 Jul · 22:31 UTC | Dark Reading | Records Are Made to Be Broken: Patch Tuesday Raises Triage Stakes |
| Tue 14 Jul · 20:14 UTC | CISA | CISA warns ADFS flaw allows local privilege escalation |
| Tue 14 Jul · 20:10 UTC | thezdi.com | Microsoft releases record 621 patches as Adobe updates key apps |
| Tue 14 Jul · 19:01 UTC | SecurityWeek | Microsoft Patches Record 622 Vulnerabilities, Including Two Exploited Zero-Days |
Who reported 6 outlets, last 12 months
- SecurityOnline2
- CISA1
- Dark Reading1
- SecurityWeek1
- thezdi.com1
- Malwarebytes1
- Microsoft, SonicWall bugs found; RabbitMQ patches auth flawsSecurityOnline
- Microsoft patches 622 flaws, fixes three critical zero day bugsMalwarebytes
- Microsoft patches 570 flaws, two zero days actively exploitedSecurityOnline
- Records Are Made to Be Broken: Patch Tuesday Raises Triage StakesDark Reading
- CISA warns ADFS flaw allows local privilege escalationCISA · official notice
- Microsoft releases record 621 patches as Adobe updates key appsthezdi.com
- Microsoft Patches Record 622 Vulnerabilities, Including Two Exploited Zero-DaysSecurityWeek
All CVEs in coverage
1How these numbers are made
CISA KEV counts use the full catalogue, refreshed every 10 minutes. CVEs in coverage are those recorded by CyberSIXT. BOD 22-01 deadlines bind US federal civilian agencies.
CVEs with FIRST EPSS at or above the 95th percentile (top 5%), excluding CVEs in CISA KEV. EPSS estimates exploitation probability over the next 30 days.
Coverage is above its usual rate at three or more articles in 7 days and at least 2.5 times the weekly mean of the preceding 8 weeks.
Product names are grouped by normalised names, with version and edition tails removed.
Fix listed refers to an advisory. Unknown fix status is counted as not listed.