CVE-2022-26929

nvd nist

Published: Sep 13, 2022Modified: Jun 17, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: secure@microsoft.com (Secondary)

Description

.NET Framework Remote Code Execution Vulnerability

Affected (12)

Products: Microsoft: .net Framework

Microsoft

1 product

.net Framework

Configuration A

1 platform

Running on/with	Platform Versions
Microsoft Windows 10	Version 20h2

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Microsoft .net Framework	Version 4.8

Configuration C

1 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Microsoft .net Framework	Version 4.6.1

Running on/with	Platform Versions
Microsoft Windows 7	Version sp1
Microsoft Windows Rt 8.1	All versions

Configuration D

1 platform

Running on/with	Platform Versions
Microsoft Windows Server 2022	All versions

Configuration E

1 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Microsoft .net Framework	Version 4.8.1

Running on/with	Platform Versions
Microsoft Windows 10	Version 21h1
Microsoft Windows 10	Version 21h2

Configuration F

1 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Microsoft .net Framework	Version 3.5.1

Running on/with	Platform Versions
Microsoft Windows 7	All versions
Microsoft Windows Server 2008	Version r2 sp1

Configuration G

3 platform

Running on/with	Platform Versions
Microsoft Windows 8.1	All versions
Microsoft Windows Server 2012	All versions
Microsoft Windows Server 2012	Version r2

Configuration H

3 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microsoft .net Framework	Version 2.0 sp2
Microsoft .net Framework	Version 3.0 sp2
Microsoft .net Framework	Version 4.6

Running on/with	Platform Versions
Microsoft Windows Server 2008	Version sp2

Configuration I

3 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Microsoft .net Framework	Version 4.6.2
Microsoft .net Framework	Version 4.7.1
Microsoft .net Framework	Version 4.7

Running on/with	Platform Versions
Microsoft Windows 10	Version 1607
Microsoft Windows Server 2016	All versions

Configuration J

2 vulnerable · 5 platform

Vulnerable Software	Affected Versions
Microsoft .net Framework	Version 3.5
Microsoft .net Framework	Version 4.7.2

Running on/with	Platform Versions
Microsoft Windows 10	Version 1809
Microsoft Windows 10	Version 20h2
Microsoft Windows 11	All versions
Microsoft Windows 11	All versions
Microsoft Windows Server 2019	All versions

References (2)

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26929

Source: secure@microsoft.com

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-26929

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.