CyberICT

CVE-2026-50646

Microsoft · Published July 20, 2026

CVSS v3.1

HIGH
Patch availableGet patch

Description

.NET Framework Remote Code Execution Vulnerability. Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally.

Affected Products

  • Microsoft .NET Framework 4.8 on Windows Server 2012
  • Microsoft .NET Framework 4.8 on Windows Server 2016 (Server Core installation)
  • Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for x64-based Systems
  • Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 22H2 for ARM64-based Systems

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C