Microsoft Security Advisory CVE-2026-62886 – .NET Elevation of Privilege Vulnerability

🗓️ 11 Aug 2026 18:58:08Reported by GitHub Advisory DatabaseType

github

github🔗 github.com👁 3 Views

Integer overflow in .NET WPF enables local privilege escalation via heap-based buffer overflow.

Reporter	Title	Published	Views	Family All 29
Circl	CVE-2026-62886	11 Aug 202619:00	–	circl
CVE	CVE-2026-62886	11 Aug 202617:06	–	cve
Cvelist	CVE-2026-62886 .NET Elevation of Privilege Vulnerability	11 Aug 202617:06	–	cvelist
EUVD	EUVD-2026-56685	11 Aug 202617:06	–	euvd
Microsoft KB	August 11, 2026-Security and Quality Rollup for .NET Framework 3.5 for Windows Server 2012 R2 (KB5120695)	11 Aug 202614:00	–	mskb
Microsoft KB	August 11, 2026-KB5120698 Cumulative Update for .NET Framework 3.5 and 4.7.2 for Windows 10, version 1809 and Windows Server 2019	11 Aug 202614:00	–	mskb
Microsoft KB	August 11, 2026-Security and Quality Rollup for .NET Framework 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows Server 2012 (KB5120699)	11 Aug 202614:00	–	mskb
Microsoft KB	August 11, 2026-Security and Quality Rollup for .NET Framework 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows Server 2012 R2 (KB5120700)	11 Aug 202614:00	–	mskb
Microsoft KB	August 11, 2026-KB5120701 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows 10 Version 21H2 and Windows 10 Version 22H2	11 Aug 202614:00	–	mskb
Microsoft KB	August 11, 2026-KB5120703 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows 10, version 1809 and Windows Server 2019	11 Aug 202614:00	–	mskb

Vulners

Node

OR

microsoft windowsdesktop.app.runtime.win-x86Range8.0.0–8.0.29nuget

microsoft windowsdesktop.app.runtime.win-x64Range8.0.0–8.0.29nuget

microsoft windowsdesktop.app.runtime.win-arm64Range8.0.0–8.0.29nuget

microsoft windowsdesktop.app.runtime.win-x86Range9.0.0–9.0.18nuget

microsoft windowsdesktop.app.runtime.win-x64Range9.0.0–9.0.18nuget

microsoft windowsdesktop.app.runtime.win-arm64Range9.0.0–9.0.18nuget

microsoft windowsdesktop.app.runtime.win-x86Range10.0.0–10.0.10nuget

microsoft windowsdesktop.app.runtime.win-x64Range10.0.0–10.0.10nuget

microsoft windowsdesktop.app.runtime.win-arm64Range10.0.0–10.0.10nuget

Source	Link
github	www.github.com/dotnet/wpf/security/advisories/GHSA-jqhp-238x-qhgf
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-62886
github	www.github.com/dotnet/announcements/issues/430
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62886
github	www.github.com/advisories/GHSA-jqhp-238x-qhgf

11 Aug 2026 18:58Current

5.5Medium risk

Vulners AI Score5.5

CVSS 3.17.8

CWE-122 CWE-190

.NET WPF integer overflow heap buffer overflow privilege escalation CWE-190 CWE-122