← Back

CVE-2026-21218

nvd nist
Published: Feb 10, 2026Modified: Jun 17, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Exploitability: 3.9 / Impact: 3.6
Source: secure@microsoft.com (Secondary)

Description

Improper handling of missing special element in .NET allows an unauthorized attacker to perform spoofing over a network.

Affected (3)

Products: Microsoft: .net
Microsoft
1 product
.net
Configuration A
3 vulnerable · 3 platform
Vulnerable SoftwareAffected Versions
Microsoft
.net
From 10.0.0 to 10.0.3
.net
From 8.0.0 to 8.0.24
.net
From 9.0.0 to 9.0.13
Running on/withPlatform Versions
Apple
Macos
All versions
Linux
Linux Kernel
All versions
Microsoft
Windows
All versions

Related CWEs

CWE-166
Improper Handling of Missing Special Element
The product receives input from an upstream component, but it does not handle or incorrectly handles when an expected special element is missing.

References (1)

Source: secure@microsoft.com
Vendor Advisory

Timeline

No history available yet.