← CVE Intelligence

CVE-2026-32177

.NET Elevation of Privilege Vulnerability PUBLISHED

Description (CNA)

No English CNA description was supplied.

Affected (CNA)

Vendor / productVersions
Microsoft / .NET 10.0affected 10.0.0 before 10.0.8
Microsoft / .NET 8.0affected 8.0.0 before 8.0.27
Microsoft / .NET 9.0affected 9.0.0 before 9.0.16
Microsoft / Microsoft .NET Framework 3.5affected 3.5.0 before 4.8.9334.0 and 4.8.4802.0
Microsoft / Microsoft .NET Framework 3.5 AND 4.7.2affected 4.7.0 before 4.8.9334.0 and 4.8.4802.0
Microsoft / Microsoft .NET Framework 3.5 AND 4.8affected 4.8.0 before 4.8.9334.0 and 4.8.4802.0
Microsoft / Microsoft .NET Framework 3.5 AND 4.8.1affected 4.8.1 before 4.8.9334.0 and 4.8.4802.0
Microsoft / Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2affected 4.7.0 before 4.8.9334.0 and 4.8.4802.0
Microsoft / Microsoft .NET Framework 4.8affected 4.8.0 before 4.8.9334.0 and 4.8.4802.0
Microsoft / Microsoft Visual Studio 2022 version 17.12affected 17.12.0 before 17.12.20
Microsoft / Microsoft Visual Studio 2022 version 17.14affected 17.14.0 before 17.14.32
Microsoft / Microsoft Visual Studio 2026 version 18.5affected 18.5.0 before 18.5.3

CWE

CWE-122, CWE-20

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

redhat-SADP

A flaw was found in dotnet. A heap-based buffer overflow in .NET allows an unauthenticated attacker to elevate privileges locally.