Stack-Based Buffer Overflow in .NET Framework Affects Microsoft Products
CVE-2026-50527

7.5HIGH

Key Information:

Vendor

Microsoft
Status
.net 10.0
.net 8.0
.net 9.0
Microsoft .net Framework 3.5
Vendor
CVE Published:
14 July 2026

What is CVE-2026-50527?

A stack-based buffer overflow has been identified in the .NET Framework, which could allow an unauthorized attacker to exploit this vulnerability to cause a denial of service on affected systems over a network. This issue underscores the importance of maintaining updated software versions to mitigate potential security risks. Users are encouraged to review the available patches and updates provided by Microsoft.

Affected Version(s)

.NET 10.0 10.0.0 < 10.0.6

.NET 8.0 8.0.0 < 8.0.29

.NET 9.0 9.0.0 < 9.0.18

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisorypatch

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.