CVE-2026-35433 — .NET Elevation of Privilege Vulnerability

Description (CNA)

No English CNA description was supplied.

Affected (CNA)

Vendor / product	Versions
Microsoft / .NET 10.0	affected 10.0.0 before 10.0.8
Microsoft / .NET 8.0	affected 8.0.0 before 8.0.27
Microsoft / .NET 9.0	affected 9.0.0 before 9.0.16
Microsoft / Microsoft .NET Framework 3.5	affected 3.5.0 before 4.8.9334.0 and 4.8.4802.0
Microsoft / Microsoft .NET Framework 3.5 AND 4.7.2	affected 4.7.0 before 4.8.9334.0 and 4.8.4802.0
Microsoft / Microsoft .NET Framework 3.5 AND 4.8	affected 4.8.0 before 4.8.9334.0 and 4.8.4802.0
Microsoft / Microsoft .NET Framework 3.5 AND 4.8.1	affected 4.8.1 before 4.8.9334.0 and 4.8.4802.0
Microsoft / Microsoft .NET Framework 4.8	affected 4.8.0 before 4.8.9334.0 and 4.8.4802.0

CWE

CWE-20, CWE-190

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-35433

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

redhat-SADP

A flaw was found in dotnet. Improper input validation and an integer overflow in .NET allow an unauthenticated attacker to elevate privileges locally.