Microsoft Security Advisory CVE-2026-62886 – .NET Elevation of Privilege Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Windows Presentation Foundation. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. An integer overflow or...

Unchecked Input for Loop Condition

Overview Affected versions of this package are vulnerable to Unchecked Input for Loop Condition via unchecked input for the loop condition in the System.Net.WebSockets. An attacker can cause a denial of service by sending specially crafted network requests that trigger excessive resource...

Unchecked Input for Loop Condition

Overview Affected versions of this package are vulnerable to Unchecked Input for Loop Condition via unchecked input for the loop condition in the System.Net.WebSockets. An attacker can cause a denial of service by sending specially crafted network requests that trigger excessive resource...

HTTP Request Smuggling

Overview Affected versions of this package are vulnerable to HTTP Request Smuggling via inconsistent handling of HTTP requests in the System.Net.HttpListener. An attacker can gain unauthorized access to sensitive information by sending specially crafted HTTP requests that exploit discrepancies in...

HTTP Request Smuggling

Overview Affected versions of this package are vulnerable to HTTP Request Smuggling via inconsistent handling of HTTP requests in the System.Net.HttpListener. An attacker can gain unauthorized access to sensitive information by sending specially crafted HTTP requests that exploit discrepancies in...

CVE-2026-68397

A flaw was found in the Linux kernel's net/iucv module. The afiucvhsrcv function fails to properly manage socket references. This allows a local attacker to trigger a use-after-free vulnerability by concurrently closing a socket while it is being processed. Successful exploitation can lead to a...

CVE-2026-70354

Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally...

CVE-2026-65810

Relative path traversal in .NET Framework allows an unauthorized attacker to elevate privileges locally...

CVE-2026-62909

Uncaught exception in .NET allows an authorized attacker to elevate privileges locally...

CVE-2026-62901

Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network...

CVE-2026-62902

Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to disclose information over a network...

CVE-2026-62900

Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network...

CVE-2026-62897

Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to execute code locally...

CVE-2026-62886

Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally...

CVE-2026-62871

Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally...

CVE-2026-62872

Incorrect authorization in .NET Framework allows an authorized attacker to elevate privileges over a network...

CVE-2026-58641

Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally...

EUVD-2026-56770

Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally...

CVE-2026-70354 .NET Core Remote Code Execution Vulnerability

...

CVE-2026-70354

CVE-2026-70354 is an out-of-bounds write vulnerability in .NET that could allow an attacker to execute code locally on a vulnerable host. The CVSS 3.1 base score is 7.8 (HIGH) with LOCAL exploit, no user interaction required? Actually user interaction is required per metrics. The vulnerability is...