← Back

CVE-2026-62897

nvd nist
Published: Aug 11, 2026Modified: Aug 14, 2026

JSON object

Loading...
7.0
Vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability: 1.0 / Impact: 5.9
Source: secure@microsoft.com (Secondary)

Description

Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to execute code locally.

Affected (9)

Microsoft
4 products
.net Framework
Visual Studio 2022
Visual Studio 2026
.net
Configuration B
1 vulnerable
Vulnerable SoftwareAffected Versions
.net Framework
Version 4.7.2
Configuration C
2 vulnerable
Vulnerable SoftwareAffected Versions
Visual Studio 2022
From 17.14.0 to 17.14.38
Visual Studio 2026
From 18.8.0 to 18.8.3
Configuration D
3 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Microsoft
.net
From 10.0.0 to 10.0.11
.net
From 8.0.0 to 8.0.30
.net
From 9.0.0 to 9.0.19
Running on/withPlatform Versions
Microsoft
Windows
All versions
Configuration E
1 vulnerable · 2 platform
Vulnerable SoftwareAffected Versions
.net Framework
Version 4.8.1
Running on/withPlatform Versions
Microsoft
Windows 11 26h1
All versions
Microsoft
Windows 11 26h1
All versions
Configuration F
2 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Microsoft
.net Framework
Version 3.5
.net Framework
Version 4.8
Running on/withPlatform Versions
Microsoft
Windows 10 1809
All versions

Related CWEs

CWE-190
Integer Overflow or Wraparound
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

References (1)

Source: secure@microsoft.com
PatchVendor Advisory

Timeline

No history available yet.