Elevation of Privilege Vulnerability in .NET Framework by Microsoft
CVE-2026-62872

8.8HIGH

Key Information:

Vendor

Microsoft
Status
Microsoft .net Framework 3.5
Microsoft .net Framework 3.5 And 4.6.2/4.7/4.7.1/4.7.2
Microsoft .net Framework 3.5 And 4.7.2
Microsoft .net Framework 3.5 And 4.8
Vendor
CVE Published:
11 August 2026

What is CVE-2026-62872?

The .NET Framework contains a vulnerability that arises from incorrect authorization, enabling an attacker with authorized access to escalate their privileges on a network. This flaw could potentially allow malicious actors to perform unauthorized actions and gain access to sensitive resources, thereby compromising the integrity and security of vulnerable systems.

Affected Version(s)

Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 Windows 10 Version 1607 for 32-bit Systems 3.0.0.0 < 2.0.50727.8984 & 3.0.30729.8980 & 4.7.4144.0

Microsoft .NET Framework 3.5 AND 4.7.2 Windows 10 Version 1809 for 32-bit Systems 4.7.0 < 2.0.50727.9070 & 3.0.30729.9068 & 4.7.4144.0

Microsoft .NET Framework 3.5 AND 4.8 Windows 10 Version 1809 for 32-bit Systems 4.8.0 < 2.0.50727.9070 & 3.0.30729.9068 & 4.8.4805.0

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisorypatch

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.