CVE-2019-0975

A security feature bypass vulnerability exists when Active Directory Federation Services (ADFS) improperly updates its list of banned IP addresses. To exploit this vulnerability, an attacker would have to convince a victim ADFS administrator to update the list of banned IP addresses. This security update corrects how ADFS updates its list of banned IP addresses., aka 'ADFS Security Feature Bypass Vulnerability'. This CVE ID is unique from CVE-2019-1126.

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0975Patch, Vendor Advisory
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0975Patch, Vendor Advisory

Published

Jul 15, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-0969Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2019-0970Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2019-0971An information disclosure vulnerability exists when Azure De…
• CVE-2019-0972This security update corrects a denial of service in the Loc…6.5
• CVE-2019-0973An elevation of privilege vulnerability exists in the Window…7.8
• CVE-2019-0974A remote code execution vulnerability exists when the Window…7.8
• CVE-2019-0976A tampering vulnerability exists in the NuGet Package Manage…5.5
• CVE-2019-0977An information disclosure vulnerability exists when the Wind…4.7
• CVE-2019-0978Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2019-0979A Cross-site Scripting (XSS) vulnerability exists when Azure…
• CVE-2019-0980A denial of service vulnerability exists when .NET Framework…
• CVE-2019-0981A denial of service vulnerability exists when .NET Framework…