by Kastro CVE-2026-47304
Microsoft .NET 10.0 runtime — .NET Security Feature Bypass Vulnerability
Description · from the CVE record
Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.
Affected
ProductAffectedFixed inSource
.NET 10.0 runtime10.0.0 – < 10.0.1010.0.10CNA
.NET 8.0 runtime8.0.0 – < 8.0.298.0.29CNA
.NET 9.0 runtime9.0.0 – < 9.0.189.0.18CNA
Microsoft .NET Framework 3.53.5.0 – < 2.0.50727.8983 & 3.0.30729.89782.0.50727.8983 & 3.0.30729.8978CNA
Microsoft .NET Framework 3.5 AND 4.7.24.7.0 – < 2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.02.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0CNA
Microsoft .NET Framework 3.5 AND 4.84.8.0 – < 2.0.50727.9069 & 3.0.30729.9067 & 4.8.4803.02.0.50727.9069 & 3.0.30729.9067 & 4.8.4803.0CNA
Microsoft .NET Framework 3.5 AND 4.8.14.8.1 – < 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.02.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0CNA
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.24.7.0 – < 4.7.4143.04.7.4143.0CNA
Microsoft .NET Framework 4.84.8.0 – < 4.8.4803.04.8.4803.0CNA
Microsoft .NET Framework 4.8.14.8.0.0 – < 4.8.9340.04.8.9340.0CNA
Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)-–CNA
Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)-–CNA
Scores by source
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
microsoft (CNA)8.1CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total