CVE-2026-47304

EPSS 0.22%
Veröffentlicht 14.07.2026 19:17:08
Zuletzt bearbeitet 24.07.2026 13:39:57
Erkennungen
Login

.NET Security Feature Bypass Vulnerability

Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 2 Referenzen 4

NVD 22 VulnDex Vulnerability Enrichment 2

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Microsoft ≫ .Net Framework Version 4.8.1

Microsoft ≫ Windows 11 26h1 Version - HwPlatform arm64
Microsoft ≫ Windows 11 26h1 Version - HwPlatform x64

Microsoft ≫ .Net Framework Version 4.8

   Microsoft ≫ Windows 10 1607 Version - HwPlatform x64
   Microsoft ≫ Windows 10 1607 Version - HwPlatform x86
   Microsoft ≫ Windows Server 2012 Version -
   Microsoft ≫ Windows Server 2012 Version r2
   Microsoft ≫ Windows Server 2016 Version -

Microsoft ≫ .Net Framework Version 4.6.2

Microsoft ≫ Windows Server 2012 Version -
Microsoft ≫ Windows Server 2012 Version r2

Microsoft ≫ .Net Framework Version 4.7

Microsoft ≫ Windows Server 2012 Version -
Microsoft ≫ Windows Server 2012 Version r2

Microsoft ≫ .Net Framework Version 4.7.1

Microsoft ≫ Windows Server 2012 Version -
Microsoft ≫ Windows Server 2012 Version r2

Microsoft ≫ .Net Framework Version 4.7.2

Microsoft ≫ Windows Server 2012 Version -
Microsoft ≫ Windows Server 2012 Version r2

Microsoft ≫ .Net Framework Version 3.5 Update -

   Microsoft ≫ Windows 10 21h2 Version - HwPlatform arm64
   Microsoft ≫ Windows 10 21h2 Version - HwPlatform x64
   Microsoft ≫ Windows 10 21h2 Version - HwPlatform x86
   Microsoft ≫ Windows 10 22h2 Version - HwPlatform arm64
   Microsoft ≫ Windows 10 22h2 Version - HwPlatform x64
   Microsoft ≫ Windows 10 22h2 Version - HwPlatform x86
   Microsoft ≫ Windows 11 23h2 Version - HwPlatform arm64
   Microsoft ≫ Windows 11 23h2 Version - HwPlatform x64
   Microsoft ≫ Windows 11 24h2 Version - HwPlatform arm64
   Microsoft ≫ Windows 11 24h2 Version - HwPlatform x64
   Microsoft ≫ Windows 11 25h2 Version - HwPlatform arm64
   Microsoft ≫ Windows 11 25h2 Version - HwPlatform x64
   Microsoft ≫ Windows Server 2022 Version -
   Microsoft ≫ Windows Server 2025 Version -

Microsoft ≫ .Net Framework Version 4.8.1

Microsoft ≫ .Net Version >= 8.0.0 < 8.0.29

   Apple ≫ macOS Version -
   Linux ≫ Linux Kernel Version -
   Microsoft ≫ Windows Version -

Microsoft ≫ .Net Version >= 9.0.0 < 9.0.18

   Apple ≫ macOS Version -
   Linux ≫ Linux Kernel Version -
   Microsoft ≫ Windows Version -

Microsoft ≫ .Net Framework Version 3.5 Update -

   Microsoft ≫ Windows 10 1809 Version - HwPlatform x64
   Microsoft ≫ Windows 10 1809 Version - HwPlatform x86
   Microsoft ≫ Windows 10 21h2 Version - HwPlatform arm64
   Microsoft ≫ Windows 10 21h2 Version - HwPlatform x64
   Microsoft ≫ Windows 10 21h2 Version - HwPlatform x86
   Microsoft ≫ Windows 10 22h2 Version - HwPlatform arm64
   Microsoft ≫ Windows 10 22h2 Version - HwPlatform x64
   Microsoft ≫ Windows 10 22h2 Version - HwPlatform x86
   Microsoft ≫ Windows Server 2019 Version -
   Microsoft ≫ Windows Server 2022 Version -

Microsoft ≫ .Net Framework Version 4.8

Microsoft ≫ .Net Framework Version 3.5 Update -

   Microsoft ≫ Windows 10 1607 Version - HwPlatform x64
   Microsoft ≫ Windows 10 1607 Version - HwPlatform x86
   Microsoft ≫ Windows 10 1809 Version - HwPlatform x64
   Microsoft ≫ Windows 10 1809 Version - HwPlatform x86
   Microsoft ≫ Windows Server 2016 Version -
   Microsoft ≫ Windows Server 2019 Version -

Microsoft ≫ .Net Framework Version 4.7.2

Microsoft ≫ .Net Framework Version 3.5 Update -

   Microsoft ≫ Windows 11 26h1 HwPlatform arm64
   Microsoft ≫ Windows 11 26h1 HwPlatform x64
   Microsoft ≫ Windows Server 2012 Version -
   Microsoft ≫ Windows Server 2012 Version r2

Microsoft ≫ .Net Version >= 10.0.0 < 10.0.6

Apple ≫ macOS Version -
Linux ≫ Linux Kernel Version -

Microsoft ≫ Visual Studio 2017 Version >= 15.0 <= 15.9

Microsoft ≫ Visual Studio 2019 Version >= 16.0 <= 16.11

Microsoft ≫ Visual Studio 2022 Version >= 17.12.0 < 17.12.22

Microsoft ≫ Visual Studio 2022 Version >= 17.14.0 < 17.14.36

Microsoft ≫ Visual Studio 2026 Version >= 18.7.0 < 18.7.4

Microsoft ≫ Visual Studio 2026 Version 18.5.0

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.22%	0.121

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Microsoft	8.1	2.2	5.9	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-345 Insufficient Verification of Data Authenticity

The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.

CWE-347 Improper Verification of Cryptographic Signature

The product does not verify, or incorrectly verifies, the cryptographic signature for data.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47304

Patch

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2026-47304

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2026-47304

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2026-47304

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2026-47304