Protection Mechanism Failure in .NET Framework by Microsoft
CVE-2026-50646

7.8HIGH

Key Information:

Vendor

Microsoft
Status
.net 8.0
.net 9.0
Microsoft .net Framework 3.5
Microsoft .net Framework 3.5 And 4.7.2
Vendor
CVE Published:
14 July 2026

What is CVE-2026-50646?

A security vulnerability in the .NET Framework has been identified, which allows unauthorized attackers to execute code locally due to a failure in the protection mechanisms. This flaw can potentially be exploited to perform unapproved actions within applications that utilize the .NET Framework, posing significant risks to system integrity and data confidentiality. Users are strongly encouraged to apply the necessary security patches provided by Microsoft to mitigate this issue.

Affected Version(s)

.NET 8.0 8.0.0 < 8.0.29

.NET 9.0 9.0.0 < 9.0.18

Microsoft .NET Framework 3.5 AND 4.7.2 Windows 10 Version 1607 for 32-bit Systems 4.7.0 < 2.0.50727.8983 & 3.0.30729.8978 & 4.7.4143.0

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisorypatch

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.