Code Injection Vulnerability in .NET Framework by Microsoft
CVE-2026-50650

7.8HIGH

Key Information:

Vendor

Microsoft
Status
.net 8.0
.net 9.0
Microsoft .net Framework 3.5
Microsoft .net Framework 3.5 And 4.7.2
Vendor
CVE Published:
14 July 2026

What is CVE-2026-50650?

A vulnerability in the .NET Framework allows attackers to exploit improper control over the generation of code, potentially leading to unauthorized privilege escalation locally. Attackers can utilize this flaw to execute harmful commands and gain elevated access to system resources that should be restricted. Addressing this vulnerability is crucial to maintaining security and integrity within affected applications.

Affected Version(s)

.NET 8.0 8.0.0 < 8.0.29

.NET 9.0 9.0.0 < 9.0.18

Microsoft .NET Framework 3.5 AND 4.7.2 Windows 10 Version 1607 for 32-bit Systems 4.7.0 < 2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisorypatch

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.