5.9

CVE-2026-62900

Medienbericht

.NET Information Disclosure Vulnerability

Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Microsoft ≫ Visual Studio 2022 Version >= 17.14.0 < 17.14.38
Microsoft ≫ Visual Studio 2026 Version >= 18.8.0 < 18.8.3
Microsoft ≫ .Net Version >= 8.0.0 < 8.0.30
   Apple ≫ macOS Version -
   Linux ≫ Linux Kernel Version -
   Microsoft ≫ Windows Version -
Microsoft ≫ .Net Version >= 9.0.0 < 9.0.19
   Apple ≫ macOS Version -
   Linux ≫ Linux Kernel Version -
   Microsoft ≫ Windows Version -
Microsoft ≫ .Net Version >= 10.0.0 < 10.0.11
   Apple ≫ macOS Version -
   Linux ≫ Linux Kernel Version -
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.55% 0.432
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Microsoft 5.9 2.2 3.6
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CWE-212 Improper Removal of Sensitive Information Before Storage or Transfer

The product stores, transfers, or shares a resource that contains sensitive information, but it does not properly remove that information before the product makes the resource available to unauthorized actors.

Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
VulnDex Intel
Media Report
11.08.2026 20:25
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62900
Patch
Vendor Advisory