Information Disclosure Vulnerability in .NET Framework by Microsoft
CVE-2026-66822

5.9MEDIUM

Key Information:

Vendor

Microsoft
Status
.net 10.0 Runtime
.net 11.0 Runtime
.net 8.0 Runtime
.net 9.0 Runtime
Vendor
CVE Published:
13 October 2026

What is CVE-2026-66822?

A security flaw in the .NET Framework allows unauthorized attackers to insert sensitive information into transmitted data, potentially exposing it over networks. This vulnerability necessitates immediate awareness and remediation to protect applications from unintentional data leaks. Users should monitor for patches and updates from Microsoft to mitigate risks associated with this issue.

Affected Version(s)

.NET 10.0 runtime 10.0.0 < 10.0.13

.NET 11.0 runtime 11.0.0 < 11.0.0-rc.2

.NET 8.0 runtime 8.0.0 < 8.0.32

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisorypatch

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.