← Back

CVE-2026-96957

nvd nist
Published: Oct 13, 2026Modified: Oct 22, 2026

JSON object

Loading...
8.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability: 2.8 / Impact: 5.9
Source: secure@microsoft.com (Secondary)

Description

Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.

Affected (11)

Microsoft
3 products
.net
Visual Studio 2022
Visual Studio 2026
Configuration A
9 vulnerable · 3 platform
Vulnerable SoftwareAffected Versions
Microsoft
.net
10.0.0 ≤ version < 10.0.13
.net
Version 11.0.0 preview1
.net
Version 11.0.0 preview2
.net
Version 11.0.0 preview3
.net
Version 11.0.0 preview4
.net
Version 11.0.0 preview5
.net
Version 11.0.0 preview6
.net
Version 11.0.0 preview7
.net
Version 11.0.0 rc1
Running on/withPlatform Versions
Apple
Macos
All versions
Linux
Linux Kernel
All versions
Microsoft
Windows
All versions
Configuration B
2 vulnerable
Vulnerable SoftwareAffected Versions
Visual Studio 2022
17.14.0 ≤ version < 17.14.42
Visual Studio 2026
18.10.0 ≤ version < 18.10.4

Related CWEs

CWE-347
Improper Verification of Cryptographic Signature
The product does not verify, or incorrectly verifies, the cryptographic signature for data.

References (1)

Source: secure@microsoft.com
Vendor Advisory

Timeline

No history available yet.