7.5
High
CVE-2026-97801 Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to perform tampering…
Description
Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to perform tampering over a network.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft .NET Framework 3.5 3.5 | 3.5.0 → latest | No fix stated |
| Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 3.0 | 3.0.0.0 → latest | No fix stated |
| Microsoft .NET Framework 3.5 AND 4.7.2 4.7 | 4.7.0 → latest | No fix stated |
| Microsoft .NET Framework 3.5 AND 4.8 4.8 | 4.8.0 → latest | No fix stated |
| Microsoft .NET Framework 3.5 AND 4.8.1 4.8 | 4.8.1 → latest | No fix stated |
| Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 4.7 | 4.7.0 → < 4.7.4150.0 | 4.7.4150.0 |
| Microsoft .NET Framework 4.8 4.8 | 4.8.0 → < 4.8.4811.0 | 4.8.4811.0 |
| Microsoft .NET Framework 4.8.1 4.8 | 4.8.0.0 → < 4.8.9363.0 | 4.8.9363.0 |
References
- .NET Framework Tampering Vulnerability msrc.microsoft.com
Timeline
- Published
- Last modified
Other CVEs of Microsoft .NET Framework 3.5
The 83 CVEs of Microsoft .NET Framework 3.5 →
CVE-2026-58280
Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network
7.5
High
CVE-2026-97788
Observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attacker to disclose…
7.5
High
CVE-2026-96958
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network
7.5
High
CVE-2026-96960
Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network
7.5
High