8.8
Élevée
CVE-2026-102869 Access of resource using incompatible type ('type confusion') in .NET and Visual Studio allows an unauthorized…
Description
Access of resource using incompatible type ('type confusion') in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 3.0 | 3.0.0.0 → dernières | Pas de correctif indiqué |
| Microsoft .NET Framework 3.5 AND 4.7.2 4.7 | 4.7.0 → dernières | Pas de correctif indiqué |
| Microsoft .NET Framework 3.5 AND 4.8 4.8 | 4.8.0 → dernières | Pas de correctif indiqué |
| Microsoft .NET Framework 3.5 AND 4.8.1 4.8 | 4.8.1 → dernières | Pas de correctif indiqué |
| Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 4.7 | 4.7.0 → < 4.7.4150.0 | 4.7.4150.0 |
| Microsoft .NET Framework 4.8 4.8 | 4.8.0 → < 4.8.4811.0 | 4.8.4811.0 |
| Microsoft .NET Framework 4.8.1 4.8 | 4.8.0.0 → < 4.8.9363.0 | 4.8.9363.0 |
| Microsoft Visual Studio 2022 version 17.14 17.14 | 17.14.0 → < 17.14.42 | 17.14.42 |
| Microsoft Visual Studio 2026 version 18.10 18.10 | 18.10.0 → < 18.10.4 | 18.10.4 |
Références
- .NET and Visual Studio Elevation of Privilege Vulnerability msrc.microsoft.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2
Les 45 CVE de Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 →
CVE-2026-97801
Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to perform tampering…
7.5
Élevée
CVE-2026-58280
Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network
7.5
Élevée
CVE-2026-97788
Observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attacker to disclose…
7.5
Élevée
CVE-2026-96960
Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network
7.5
Élevée