Microsoft Security Advisory CVE-2026-96222 - .NET Spoofing Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in System.Security.Cryptography.Xml. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. KeyInfoX509Data can accept...

GHSA-VRV5-2JG9-4MMR Microsoft Security Advisory CVE-2026-96222 - .NET Spoofing Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in System.Security.Cryptography.Xml. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. KeyInfoX509Data can accept...

Improper Certificate Validation

Overview Affected versions of this package are vulnerable to Improper Certificate Validation via the KeyInfoX509Data process. An attacker can impersonate trusted entities or forge certificates by supplying serialized certificate formats containing attacker-controlled chain metadata instead of a...