7.3
CVE-2026-32177
- EPSS 0.09%
- Veröffentlicht 12.05.2026 16:58:15
- Zuletzt bearbeitet 13.05.2026 15:34:52
- Quelle secure@microsoft.com
- CVE-Watchlists
- Unerledigt
.NET Elevation of Privilege Vulnerability
Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerMicrosoft
≫
Produkt
.NET 10.0
Version
10.0.0
Version <
10.0.8
Status
affected
HerstellerMicrosoft
≫
Produkt
.NET 8.0
Version
8.0.0
Version <
8.0.27
Status
affected
HerstellerMicrosoft
≫
Produkt
.NET 9.0
Version
9.0.0
Version <
9.0.16
Status
affected
HerstellerMicrosoft
≫
Produkt
Microsoft .NET Framework 3.5
Version
3.5.0
Version <
4.8.9334.0 and 4.8.4802.0
Status
affected
HerstellerMicrosoft
≫
Produkt
Microsoft .NET Framework 3.5 AND 4.7.2
Version
4.7.0
Version <
4.8.9334.0 and 4.8.4802.0
Status
affected
HerstellerMicrosoft
≫
Produkt
Microsoft .NET Framework 3.5 AND 4.8
Version
4.8.0
Version <
4.8.9334.0 and 4.8.4802.0
Status
affected
HerstellerMicrosoft
≫
Produkt
Microsoft .NET Framework 3.5 AND 4.8.1
Version
4.8.1
Version <
4.8.9334.0 and 4.8.4802.0
Status
affected
HerstellerMicrosoft
≫
Produkt
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2
Version
4.7.0
Version <
4.8.9334.0 and 4.8.4802.0
Status
affected
HerstellerMicrosoft
≫
Produkt
Microsoft .NET Framework 4.8
Version
4.8.0
Version <
4.8.9334.0 and 4.8.4802.0
Status
affected
HerstellerMicrosoft
≫
Produkt
Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
Version
15.9.0
Version <
15.9.80
Status
affected
HerstellerMicrosoft
≫
Produkt
Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)
Version
16.11.0
Version <
16.11.56
Status
affected
HerstellerMicrosoft
≫
Produkt
Microsoft Visual Studio 2022 version 17.12
Version
17.12.0
Version <
17.12.20
Status
affected
HerstellerMicrosoft
≫
Produkt
Microsoft Visual Studio 2022 version 17.14
Version
17.14.0
Version <
17.14.31
Status
affected
HerstellerMicrosoft
≫
Produkt
Microsoft Visual Studio 2026 version 18.5
Version
18.5.0
Version <
18.5.3
Status
affected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.09% | 0.254 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| secure@microsoft.com | 7.3 | 1.8 | 5.5 |
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L
|
CWE-122 Heap-based Buffer Overflow
A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.