CVE-2026-47303

🗓️ 14 Jul 2026 18:45:33Reported by microsoftType

Authentication bypass by assumed-immutable data in ASP.NET Core allows an authorized attacker to elevate privileges over a network.

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2026-47303	14 Jul 202619:01	–	circl
Cvelist	CVE-2026-47303 ASP.NET Core Elevation of Privilege Vulnerability	14 Jul 202618:45	–	cvelist
Microsoft KB	.NET 8.0 Update - July 14, 2026	14 Jul 202614:00	–	mskb
Microsoft KB	.NET 9.0 Update - July 14, 2026	14 Jul 202614:00	–	mskb
Microsoft KB	.NET 10.0 Update - July 14, 2026	14 Jul 202614:00	–	mskb
Microsoft CVE	ASP.NET Core Elevation of Privilege Vulnerability	14 Jul 202614:00	–	mscve
NCSC	vulnerabilities handled in Microsoft Developer Tools	14 Jul 202618:37	–	ncsc
NVD	CVE-2026-47303	14 Jul 202619:17	–	nvd

Vulners

CNA

Node

microsoft .net_frameworkRange10.0.0–10.0.6

Node

microsoft .net_frameworkRange8.0.0–8.0.29

Node

microsoft .net_frameworkRange9.0.0–9.0.18

Node

microsoft visual_studio_2022Range17.12.0–17.12.22

Node

microsoft visual_studio_2022Range17.14.0–17.14.36

Node

microsoft visual_studio_2026Range18.0–18.7.4

[
  {
    "vendor": "Microsoft",
    "product": ".NET 10.0",
    "versions": [
      {
        "version": "10.0.0",
        "lessThan": "10.0.6",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": ".NET 8.0",
    "versions": [
      {
        "version": "8.0.0",
        "lessThan": "8.0.29",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": ".NET 9.0",
    "versions": [
      {
        "version": "9.0.0",
        "lessThan": "9.0.18",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft Visual Studio 2022 version 17.12",
    "versions": [
      {
        "version": "17.12.0",
        "lessThan": "17.12.22",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft Visual Studio 2022 version 17.14",
    "versions": [
      {
        "version": "17.14.0",
        "lessThan": "17.14.36",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft Visual Studio 2026 version 18.7",
    "versions": [
      {
        "version": "18.0",
        "lessThan": "18.7.4",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  }
]

Source	Link
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47303

14 Jul 2026 19:38Current

6.1Medium risk

Vulners AI Score6.1

CVSS 3.18.8