Spoofing Vulnerability in .NET Framework by Microsoft
CVE-2026-50659

6.5MEDIUM

Key Information:

Vendor

Microsoft
Status
.net 10.0
.net 8.0
.net 9.0
Microsoft Visual Studio 2022 Version 17.12
Vendor
CVE Published:
14 July 2026

What is CVE-2026-50659?

A vulnerability exists in the .NET Framework that allows an authorized attacker to exploit improper encoding or escaping of output. This could enable the attacker to perform network spoofing attacks, compromising the integrity of communications and potentially misleading users or systems into believing they are interacting with trusted sources. It is crucial for users and organizations to remain vigilant and ensure they implement necessary updates and patches to mitigate the risks associated with this vulnerability.

Affected Version(s)

.NET 10.0 10.0.0 < 10.0.6

.NET 8.0 8.0.0 < 8.0.29

.NET 9.0 9.0.0 < 9.0.18

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisorypatch

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.