8.1
High
CVE-2026-47304 Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature…
Description
Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft Visual Studio 2022 version 17.12 17.12 | 17.12.0 → < 17.12.22 | 17.12.22 |
| Microsoft Visual Studio 2022 version 17.14 17.14 | 17.14.0 → < 17.14.36 | 17.14.36 |
| Microsoft Visual Studio 2026 version 18.7 18.0 | 18.0 → < 18.7.4 | 18.7.4 |
| Microsoft .NET Framework 3.5 3.5 | 3.5.0 → latest | No fix stated |
| Microsoft .NET Framework 3.5 AND 4.7.2 4.7 | 4.7.0 → latest | No fix stated |
| Microsoft .NET Framework 3.5 AND 4.8 4.8 | 4.8.0 → latest | No fix stated |
| Microsoft .NET Framework 3.5 AND 4.8.1 4.8 | 4.8.1 → latest | No fix stated |
| Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 4.7 | 4.7.0 → < 4.7.4143.0 | 4.7.4143.0 |
| Microsoft .NET Framework 4.8 4.8 | 4.8.0 → < 4.8.4803.0 | 4.8.4803.0 |
Show the 10 other branches Hide the 10 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8) | Versions not published | |
| Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) | Versions not published | |
| Microsoft Visual Studio 2026 version 18.5 | Versions not published | |
| .NET 10.0 10.0 | 10.0.0 → < 10.0.10 | 10.0.10 |
| .NET 8.0 8.0 | 8.0.0 → < 8.0.29 | 8.0.29 |
| .NET 9.0 9.0 | 9.0.0 → < 9.0.18 | 9.0.18 |
| Microsoft .NET Framework 4.8.1 4.8 | 4.8.0.0 → < 4.8.9340.0 | 4.8.9340.0 |
| .NET 10.0 runtime 10.0 | 10.0.0 → < 10.0.10 | 10.0.10 |
| .NET 8.0 runtime 8.0 | 8.0.0 → < 8.0.29 | 8.0.29 |
| .NET 9.0 runtime 9.0 | 9.0.0 → < 9.0.18 | 9.0.18 |
References
- .NET Security Feature Bypass Vulnerability msrc.microsoft.com
Timeline
- Published
- Last modified
Other CVEs of Microsoft Visual Studio 2022 version 17.12
The 42 CVEs of Microsoft Visual Studio 2022 version 17.12 →
CVE-2026-50659
Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network
6.5
Medium
CVE-2026-50651
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a…
7.5
High
CVE-2026-50650
Improper control of generation of code ('code injection') in .NET Framework allows an unauthorized attacker to elevate…
7.8
High
CVE-2026-50649
Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally
7.8
High