8.1
Élevée
CVE-2026-47304 Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature…
Description
Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Microsoft Visual Studio 2022 version 17.12 17.12 | 17.12.0 → < 17.12.22 | 17.12.22 |
| Microsoft Visual Studio 2022 version 17.14 17.14 | 17.14.0 → < 17.14.36 | 17.14.36 |
| Microsoft Visual Studio 2026 version 18.7 18.0 | 18.0 → < 18.7.4 | 18.7.4 |
| Microsoft .NET Framework 3.5 3.5 | 3.5.0 → dernières | Pas de correctif indiqué |
| Microsoft .NET Framework 3.5 AND 4.7.2 4.7 | 4.7.0 → dernières | Pas de correctif indiqué |
| Microsoft .NET Framework 3.5 AND 4.8 4.8 | 4.8.0 → dernières | Pas de correctif indiqué |
| Microsoft .NET Framework 3.5 AND 4.8.1 4.8 | 4.8.1 → dernières | Pas de correctif indiqué |
| Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 4.7 | 4.7.0 → < 4.7.4143.0 | 4.7.4143.0 |
| Microsoft .NET Framework 4.8 4.8 | 4.8.0 → < 4.8.4803.0 | 4.8.4803.0 |
Afficher les 10 autres branches Masquer les 10 autres branches
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8) | Versions non publiées | |
| Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) | Versions non publiées | |
| Microsoft Visual Studio 2026 version 18.5 | Versions non publiées | |
| .NET 10.0 10.0 | 10.0.0 → < 10.0.10 | 10.0.10 |
| .NET 8.0 8.0 | 8.0.0 → < 8.0.29 | 8.0.29 |
| .NET 9.0 9.0 | 9.0.0 → < 9.0.18 | 9.0.18 |
| Microsoft .NET Framework 4.8.1 4.8 | 4.8.0.0 → < 4.8.9340.0 | 4.8.9340.0 |
| .NET 10.0 runtime 10.0 | 10.0.0 → < 10.0.10 | 10.0.10 |
| .NET 8.0 runtime 8.0 | 8.0.0 → < 8.0.29 | 8.0.29 |
| .NET 9.0 runtime 9.0 | 9.0.0 → < 9.0.18 | 9.0.18 |
Références
- .NET Security Feature Bypass Vulnerability msrc.microsoft.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Microsoft Visual Studio 2022 version 17.12
Les 42 CVE de Microsoft Visual Studio 2022 version 17.12 →
CVE-2026-50659
Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network
6.5
Moyenne
CVE-2026-50651
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a…
7.5
Élevée
CVE-2026-50650
Improper control of generation of code ('code injection') in .NET Framework allows an unauthorized attacker to elevate…
7.8
Élevée
CVE-2026-50649
Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally
7.8
Élevée