8.8

CVE-2026-62872

Medienbericht

.NET Framework Elevation of Privilege Vulnerability

Incorrect authorization in .NET Framework allows an authorized attacker to elevate privileges over a network.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Microsoft.Net Framework Version4.8.1
   MicrosoftWindows 11 26h1 Version- HwPlatformarm64
   MicrosoftWindows 11 26h1 Version- HwPlatformx64
Microsoft.Net Framework Version4.8
   MicrosoftWindows 10 1607 Version- HwPlatformx64
   MicrosoftWindows 10 1607 Version- HwPlatformx86
   MicrosoftWindows Server 2012 Version-
   MicrosoftWindows Server 2012 Versionr2
   MicrosoftWindows Server 2016 Version-
Microsoft.Net Framework Version4.6.2
   MicrosoftWindows Server 2012 Version-
   MicrosoftWindows Server 2012 Versionr2
Microsoft.Net Framework Version4.7
   MicrosoftWindows Server 2012 Version-
   MicrosoftWindows Server 2012 Versionr2
Microsoft.Net Framework Version4.7.1
   MicrosoftWindows Server 2012 Version-
   MicrosoftWindows Server 2012 Versionr2
Microsoft.Net Framework Version4.7.2
   MicrosoftWindows Server 2012 Version-
   MicrosoftWindows Server 2012 Versionr2
Microsoft.Net Framework Version3.5 Update-
   MicrosoftWindows 10 21h2 Version- HwPlatformarm64
   MicrosoftWindows 10 21h2 Version- HwPlatformx64
   MicrosoftWindows 10 21h2 Version- HwPlatformx86
   MicrosoftWindows 10 22h2 Version- HwPlatformarm64
   MicrosoftWindows 10 22h2 Version- HwPlatformx64
   MicrosoftWindows 10 22h2 Version- HwPlatformx86
   MicrosoftWindows 11 23h2 Version- HwPlatformarm64
   MicrosoftWindows 11 23h2 Version- HwPlatformx64
   MicrosoftWindows 11 24h2 Version- HwPlatformarm64
   MicrosoftWindows 11 24h2 Version- HwPlatformx64
   MicrosoftWindows 11 25h2 Version- HwPlatformarm64
   MicrosoftWindows 11 25h2 Version- HwPlatformx64
   MicrosoftWindows Server 2022 Version-
   MicrosoftWindows Server 2025 Version- HwPlatformx64
Microsoft.Net Framework Version4.8.1
   MicrosoftWindows 10 21h2 Version- HwPlatformarm64
   MicrosoftWindows 10 21h2 Version- HwPlatformx64
   MicrosoftWindows 10 21h2 Version- HwPlatformx86
   MicrosoftWindows 10 22h2 Version- HwPlatformarm64
   MicrosoftWindows 10 22h2 Version- HwPlatformx64
   MicrosoftWindows 10 22h2 Version- HwPlatformx86
   MicrosoftWindows 11 23h2 Version- HwPlatformarm64
   MicrosoftWindows 11 23h2 Version- HwPlatformx64
   MicrosoftWindows 11 24h2 Version- HwPlatformarm64
   MicrosoftWindows 11 24h2 Version- HwPlatformx64
   MicrosoftWindows 11 25h2 Version- HwPlatformarm64
   MicrosoftWindows 11 25h2 Version- HwPlatformx64
   MicrosoftWindows Server 2022 Version-
   MicrosoftWindows Server 2025 Version- HwPlatformx64
Microsoft.Net Framework Version3.5 Update-
   MicrosoftWindows 10 1809 Version- HwPlatformx64
   MicrosoftWindows 10 1809 Version- HwPlatformx86
   MicrosoftWindows Server 2019 Version-
Microsoft.Net Framework Version4.7.2
   MicrosoftWindows 10 1809 Version- HwPlatformx64
   MicrosoftWindows 10 1809 Version- HwPlatformx86
   MicrosoftWindows Server 2019 Version-
Microsoft.Net Framework Version3.5 Update-
   MicrosoftWindows 10 1809 Version- HwPlatformx64
   MicrosoftWindows 10 1809 Version- HwPlatformx86
   MicrosoftWindows 10 21h2 Version- HwPlatformarm64
   MicrosoftWindows 10 21h2 Version- HwPlatformx64
   MicrosoftWindows 10 21h2 Version- HwPlatformx86
   MicrosoftWindows 10 22h2 Version- HwPlatformarm64
   MicrosoftWindows 10 22h2 Version- HwPlatformx64
   MicrosoftWindows 10 22h2 Version- HwPlatformx86
   MicrosoftWindows Server 2019 Version-
   MicrosoftWindows Server 2022 Version-
Microsoft.Net Framework Version4.8
   MicrosoftWindows 10 1809 Version- HwPlatformx64
   MicrosoftWindows 10 1809 Version- HwPlatformx86
   MicrosoftWindows 10 21h2 Version- HwPlatformarm64
   MicrosoftWindows 10 21h2 Version- HwPlatformx64
   MicrosoftWindows 10 21h2 Version- HwPlatformx86
   MicrosoftWindows 10 22h2 Version- HwPlatformarm64
   MicrosoftWindows 10 22h2 Version- HwPlatformx64
   MicrosoftWindows 10 22h2 Version- HwPlatformx86
   MicrosoftWindows Server 2019 Version-
   MicrosoftWindows Server 2022 Version-
Microsoft.Net Framework Version3.5 Update-
   MicrosoftWindows 10 1607 Version- HwPlatformx64
   MicrosoftWindows 10 1607 Version- HwPlatformx86
   MicrosoftWindows Server 2016 Version-
Microsoft.Net Framework Version4.6.2
   MicrosoftWindows 10 1607 Version- HwPlatformx64
   MicrosoftWindows 10 1607 Version- HwPlatformx86
   MicrosoftWindows Server 2016 Version-
Microsoft.Net Framework Version4.7
   MicrosoftWindows 10 1607 Version- HwPlatformx64
   MicrosoftWindows 10 1607 Version- HwPlatformx86
   MicrosoftWindows Server 2016 Version-
Microsoft.Net Framework Version4.7.1
   MicrosoftWindows 10 1607 Version- HwPlatformx64
   MicrosoftWindows 10 1607 Version- HwPlatformx86
   MicrosoftWindows Server 2016 Version-
Microsoft.Net Framework Version4.7.2
   MicrosoftWindows 10 1607 Version- HwPlatformx64
   MicrosoftWindows 10 1607 Version- HwPlatformx86
   MicrosoftWindows Server 2016 Version-
Microsoft.Net Framework Version3.5 Update-
   MicrosoftWindows 11 26h1 Version- HwPlatformarm64
   MicrosoftWindows 11 26h1 Version- HwPlatformx64
   MicrosoftWindows Server 2012 Version-
   MicrosoftWindows Server 2012 Versionr2
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.53% 0.422
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Microsoft 8.8 2.8 5.9
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-863 Incorrect Authorization

The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
VulnDex Intel
Media Report
11.08.2026 20:25
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62872
Patch
Vendor Advisory