Security News

Cybersecurity news aggregator

๐Ÿ”“
HIGH Vulnerabilities Microsoft Security Response Center

CVE-2026-62897 .NET Framework Remote Code Execution Vulnerability

CVE-2026-62897 is an integer overflow vulnerability (CWE-190) in the .NET Framework that allows local, unauthorized attackers to achieve remote code execution. It has a CVSS 3.1 score of 7.0 (High), with exploitation assessed as complex and less likely due to high attack complexity. The vulnerability affects Microsoft Visual Studio 2022 version 17.14, and a security update has been released for this version.
Read Full Article →

We use optional cookies to improve your experience on our websites, such as through social media connections, and to display personalized advertising based on your online activity. If you reject optional cookies, only cookies necessary to provide you the services will be used. You may change your selection by clicking โ€œManage Cookiesโ€ at the bottom of the page. Privacy Statement Third-Party Cookies AcceptRejectManage cookies MSRC ๎ฌ Customer Guidance ๎ฌ Security Update Guide ๎ฌ Vulnerabilities ๎ฌ CVE-2026-62897 .NET Framework Remote Code Execution Vulnerability New On this page ๎œ CVE-2026-62897 ๎œ• Subscribe RSS PowerShell ๎ฅƒ API ๎ฅƒ CSAF Security Vulnerability Released: Aug 11, 2026 Assigning CNA Microsoft CVE.org link CVE-2026-62897 ๏Ÿ Impact Remote Code Execution Max Severity Important Weakness CWE-190: Integer Overflow or Wraparound CVSS Source Microsoft Vector String CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Metrics CVSS:3.1 7.0 / 6.1 ๎ฅ† Base score metrics: 7.0 / Temporal score metrics: 6.1 ๎ฅฎ Expand all ๎ฅฐ Collapse all Metric Value ๎ฃฌ ๎ฅด Base score metrics(8) Attack Vector Local Attack Complexity High Privileges Required None User Interaction Required Scope Unchanged Confidentiality High Integrity High Availability High ๎ฃฌ ๎ฅด Temporal score metrics(3) Exploit Code Maturity Unproven Remediation Level Official Fix Report Confidence Confirmed Please see Common Vulnerability Scoring System for more information on the definition of these metrics. Executive Summary Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to execute code locally. Exploitability The following table provides an exploitability assessment for this vulnerability at the time of original publication. Publicly disclosed No Exploited No Exploitability assessment Exploitation Less Likely FAQ According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability? A high attack complexity means that successful exploitation is complex and timeโ€‘consuming, requiring significant effort and precise conditions for an attacker to reliably exploit the vulnerability. Acknowledgements 41ae55e9310ff27fa6f26af4727e5590 Ky0toFu ๐• @ ky0tofu Microsoft recognizes the efforts of those in the security community who help us protect customers through coordinated vulnerability disclosure. See Acknowledgements for more information. Security Updates To determine the support lifecycle for your software, see the Microsoft Support Lifecycle. Release date Descending ๎œ Edit columns ๎ข– Download ๎œœ Filters ๎œก Product Family ๎œ Max Severity ๎œ Impact ๎œ Platform ๎œ ๎ข” Clear Release date ๎นฉ Product Platform Impact Max Severity Article Download Build Number Assigning CNA Title: Release date, Content: Aug 11, 2026 Microsoft Visual Studio 2022 version 17.14 - Remote Code Execution Important Title: Knowledge Base Articles for Microsoft Visual Studio 2022 version 17.14, Content:, 1 link - Title: Download Security Update for Microsoft Visual Studio 2022 version 17.14, Content:, 1 link Security Update Title: Build numbers, Content: 17.14.38 Title: Assigning CNA, Content: Microsoft Title: Release date, Content: Aug 11, 2026 Microsoft Visual Studio 2026 version 18.8 - Remote Code Execution Important Title: Knowledge Base Articles for Microsoft Visual Studio 2026 version 18.8, Content:, 1 link - Title: Download Security Update for Microsoft Visual Studio 2026 version 18.8, Content:, 1 link Security Update Title: Build numbers, Content: 18.8.3 Title: Assigning CNA, Content: Microsoft Title: Release date, Content: Aug 11, 2026 .NET 9.0 installed on Windows - Remote Code Execution Important Title: Knowledge Base Articles for .NET 9.0 installed on Windows, Content:, 1 link 5122105 ๏Ÿ Title: Download Security Update for .NET 9.0 installed on Windows, Content:, 1 link Security Update ๏Ÿ Title: Build numbers, Content: 9.0.19 Title: Assigning CNA, Content: Microsoft Title: Release date, Content: Aug 11, 2026 .NET 8.0 installed on Windows - Remote Code Execution Important Title: Knowledge Base Articles for .NET 8.0 installed on Windows, Content:, 1 link 5122104 ๏Ÿ Title: Download Security Update for .NET 8.0 installed on Windows, Content:, 1 link Security Update ๏Ÿ Title: Build numbers, Content: 8.0.30 Title: Assigning CNA, Content: Microsoft Title: Release date, Content: Aug 11, 2026 .NET 9.0 installed on Linux - Remote Code Execution Important Title: Knowledge Base Articles for .NET 9.0 installed on Linux, Content:, 1 link 5122105 ๏Ÿ Title: Download Security Update for .NET 9.0 installed on Linux, Content:, 1 link Security Update ๏Ÿ Title: Build numbers, Content: 9.0.19 Title: Assigning CNA, Content: Microsoft Title: Release date, Content: Aug 11, 2026 .NET 8.0 installed on Linux - Remote Code Execution Important Title: Knowledge Base Articles for .NET 8.0 installed on Linux, Content:, 1 link 5122104 ๏Ÿ Title: Download Security Update for .NET 8.0 installed on Linux, Content:, 1 link Security Update ๏Ÿ Title: Build numbers, Content: 8.0.30 Title: Assigning CNA, Content: Microsoft Title: Release date, Content: Aug 11, 2026 .NET 8.0 installed on Mac OS - Remote Code Execution Important Title: Knowledge Base Articles for .NET 8.0 installed on Mac OS, Content:, 1 link 5122104 ๏Ÿ Title: Download Security Update for .NET 8.0 installed on Mac OS, Content:, 1 link Security Update ๏Ÿ Title: Build numbers, Content: 8.0.30 Title: Assigning CNA, Content: Microsoft Title: Release date, Content: Aug 11, 2026 Microsoft .NET Framework 3.5 Windows 11 version 26H1 for x64-based Systems Remote Code Execution Important Title: Knowledge Base Articles for Microsoft .NET Framework 3.5, Content:, 1 link 5120747 ๏Ÿ Title: Download Security Update for Microsoft .NET Framework 3.5, Content:, 1 link Security Update ๏Ÿ Title: Build numbers, Content: 2.0.50727.9183 & 3.0.30729.9169 Title: Assigning CNA, Content: Microsoft Title: Release date, Content: Aug 11, 2026 .NET 10.0 installed on Linux - Remote Code Execution Important Title: Knowledge Base Articles for .NET 10.0 installed on Linux, Content:, 1 link 5122106 ๏Ÿ Title: Download Security Update for .NET 10.0 installed on Linux, Content:, 1 link Security Update ๏Ÿ Title: Build numbers, Content: 10.0.11 Title: Assigning CNA, Content: Microsoft Title: Release date, Content: Aug 11, 2026 .NET 10.0 installed on Windows - Remote Code Execution Important Title: Knowledge Base Articles for .NET 10.0 installed on Windows, Content:, 1 link 5122106 ๏Ÿ Title: Download Security Update for .NET 10.0 installed on Windows, Content:, 1 link Security Update ๏Ÿ Title: Build numbers, Content: 10.0.11 Title: Assigning CNA, Content: Microsoft Title: Release date, Content: Aug 11, 2026 .NET 9.0 installed on Mac OS - Remote Code Execution Important Title: Knowledge Base Articles for .NET 9.0 installed on Mac OS, Content:, 1 link 5122105 ๏Ÿ Title: Download Security Update for .NET 9.0 installed on Mac OS, Content:, 1 link Security Update ๏Ÿ Title: Build numbers, Content: 9.0.19 Title: Assigning CNA, Content: Microsoft Title: Release date, Content: Aug 11, 2026 Microsoft .NET Framework 4.8.1 Windows 11 version 26H1 for x64-based Systems Remote Code Execution Important Title: Knowledge Base Articles for Microsoft .NET Framework 4.8.1, Content:, 1 link 5120711 ๏Ÿ Title: Download Security Update for Microsoft .NET Framework 4.8.1, Content:, 1 link Security Update ๏Ÿ Title: Build numbers, Content: 4.8.9344.0 Title: Assigning CNA, Content: Microsoft Title: Release date, Content: Aug 11, 2026 Microsoft .NET Framework 3.5 Windows 11 Version 26H1 for ARM64-based Systems Remote Code Execution Important Title: Knowledge Base Articles for Microsoft .NET Framework 3.5, Content:, 1 link 5120747 ๏Ÿ Title: Download Security Update for Microsoft .NET Framework 3.5, Content:, 1 link Security Update ๏Ÿ Title: Build numbers, Content: 2.0.50727.9183 & 3.0.30729.9169 Title: Assigning CNA, Content: Microsoft Title: Release date, Content: Aug 11, 2026 .NET 10.0 installed on Mac OS - Remote Code Execution Important Title: Knowledge Base Articles for .NET 10.0 installed on Mac OS, Content:, 1 link 5122106 ๏Ÿ Title: Download Security Update for .NET 10.0 installed on Mac OS, Content:, 1 link Security Update ๏Ÿ Title: Build numbers, Content: 10.0.11 Title: Assigning CNA, Content: Microsoft Title: Release date, Content: Aug 11, 2026 Microsoft .NET Framework 4.8.1 Windows 11 Version 26H1 for ARM64-based Systems Remote Code Execution Important Title: Knowledge Base Articles for Microsoft .NET Framework 4.8.1, Content:, 1 link 5120711 ๏Ÿ Title: Download Security Update for Microsoft .NET Framework 4.8.1, Content:, 1 link Security Update ๏Ÿ Title: Build numbers, Content: 4.8.9344.0 Title: Assigning CNA, Content: Microsoft Title: Release date, Content: Aug 11, 2026 Microsoft .NET Framework 3.5 AND 4.7.2 Windows 10 Version 1809 for ARM64-based Systems Remote Code Execution Important Title: Knowledge Base Articles for Microsoft .NET Framework 3.5 AND 4.7.2, Content:, 1 link 5120698 ๏Ÿ Title: Download Security Update for Microsoft .NET Framework 3.5 AND 4.7.2, Content:, 1 link Security Update ๏Ÿ Title: Build numbers, Content: 2.0.50727.9070 & 3.0.30729.9068 & 4.7.4144.0 Title: Assigning CNA, Content: Microsoft Title: Release date, Content: Aug 11, 2026 Microsoft .NET Framework 3.5 AND 4.8 Windows 10 Version 1809 for ARM64-based Systems Remote Code Execution Important Title: Knowledge Base Articles for Microsoft .NET Framework 3.5 AND 4.8, Content:, 1 link 5120703 ๏Ÿ Title: Download Security Update for Microsoft .NET Framework 3.5 AND 4.8, Content:, 1 link Security Update ๏Ÿ Title: Build numbers, Content: 2.0.50727.9070 & 3.0.30729.9068 & 4.8.4805.0 Title: Assigning CNA, Content: Microsoft All results loaded Loaded all 17 rows Disclaimer The information provided in the Microsoft Knowledge Base is provided "as is" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event sh

Share this article