CVE-2026-50646

Published: Jul 14, 2026Modified: Jul 21, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: secure@microsoft.com (Secondary)

Description

Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally.

Related CWEs

Deserialization of Untrusted Data

The product deserializes untrusted data without sufficiently verifying that the resulting data will be valid.

Protection Mechanism Failure

The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.

References (1)

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50646

Source: secure@microsoft.com

Timeline

No history available yet.