Описание
.NET Remote Code Execution Vulnerability
Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally.
Обновления
| Продукт | Статья | Обновление |
|---|---|---|
| .NET 8.0 installed on Windows | ||
| .NET 9.0 installed on Windows | ||
| Microsoft Visual Studio 2026 version 18.7 | ||
| Microsoft .NET Framework 3.5 on Windows 11 version 26H1 for x64-based Systems | ||
| Microsoft .NET Framework 3.5 on Windows 11 Version 26H1 for ARM64-based Systems | ||
| Microsoft .NET Framework 4.8.1 on Windows 11 version 26H1 for x64-based Systems | ||
| Microsoft .NET Framework 4.8.1 on Windows 11 Version 26H1 for ARM64-based Systems | ||
| Microsoft .NET Framework 4.8 on Windows 10 Version 1607 for 32-bit Systems | ||
| Microsoft .NET Framework 4.8 on Windows 10 Version 1607 for x64-based Systems | ||
| Microsoft .NET Framework 4.8 on Windows Server 2016 |
Показывать по
Возможность эксплуатации
Publicly Disclosed
Exploited
Latest Software Release
EPSS
7.8 High
CVSS3
Связанные уязвимости
Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally.
Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally.
Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally.
Уязвимость программных платформ .NET и Microsoft Visual Studio, связанная с недостатками механизма десериализации, позволяющая нарушителю выполнить произвольный код
ELSA-2026-41897: .NET 10.0 security, bug fix, and enhancement update (IMPORTANT)
EPSS
7.8 High
CVSS3