p PatchFirst

CVE-2026-47304

CVE-2026-47304 · .NET Security Feature Bypass Vulnerability

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.

CVSS 8.1 · High · EPSS 0.3% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • .net 10.0 runtime

    Versions
    • ≥ 10.0.0, < 10.0.10: Affected (custom)

    Update to 10.0.10

  • .net 8.0 runtime

    Versions
    • ≥ 8.0.0, < 8.0.29: Affected (custom)

    Update to 8.0.29

  • .net 9.0 runtime

    Versions
    • ≥ 9.0.0, < 9.0.18: Affected (custom)

    Update to 9.0.18

  • microsoft .net framework 3.5

    Versions
    • ≥ 3.5.0, < 2.0.50727.8983 & 3.0.30729.8978: Affected (custom)

    No fix published

  • microsoft .net framework 3.5 and 4.7.2

    Versions
    • ≥ 4.7.0, < 2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0: Affected (custom)

    No fix published

  • microsoft .net framework 3.5 and 4.8

    Versions
    • ≥ 4.8.0, < 2.0.50727.9069 & 3.0.30729.9067 & 4.8.4803.0: Affected (custom)

    No fix published

  • microsoft .net framework 3.5 and 4.8.1

    Versions
    • ≥ 4.8.1, < 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0: Affected (custom)

    No fix published

  • microsoft .net framework 4.6.2/4.7/4.7.1/4.7.2

    Versions
    • ≥ 4.7.0, < 4.7.4143.0: Affected (custom)

    Update to 4.7.4143.0

  • microsoft .net framework 4.8

    Versions
    • ≥ 4.8.0, < 4.8.4803.0: Affected (custom)

    Update to 4.8.4803.0

  • microsoft .net framework 4.8.1

    Versions
    • ≥ 4.8.0.0, < 4.8.9340.0: Affected (custom)

    Update to 4.8.9340.0

  • microsoft visual studio 2017 version 15.9 (includes 15.0 - 15.8)

    Versions
    • -: Affected

    No fix published

  • microsoft visual studio 2019 version 16.11 (includes 16.0 - 16.10)

    Versions
    • -: Affected

    No fix published

  • microsoft visual studio 2022 version 17.12

    Versions
    • ≥ 17.12.0, < 17.12.22: Affected (custom)

    Update to 17.12.22

  • microsoft visual studio 2022 version 17.14

    Versions
    • ≥ 17.14.0, < 17.14.36: Affected (custom)

    Update to 17.14.36

  • microsoft visual studio 2026 version 18.5

    Versions
    • -: Affected

    No fix published

  • microsoft visual studio 2026 version 18.7

    Versions
    • ≥ 18.0, < 18.7.4: Affected (custom)

    Update to 18.7.4

  • dotnet6 Ubuntu:22.04:LTS

    Versions
    • 6.0.108-0ubuntu1~22.04.1
    • 6.0.109-0ubuntu1~22.04.1
    • 6.0.110-0ubuntu1~22.04.1
    • 6.0.111-0ubuntu1~22.04.1
    • 6.0.113-0ubuntu1~22.04.1
    • 6.0.116-0ubuntu1~22.04.1
    • 6.0.118-0ubuntu1~22.04.1
    • 6.0.119-0ubuntu1~22.04.1
    • 6.0.120-0ubuntu1~22.04.1
    • 6.0.121-0ubuntu1~22.04.1
    • 6.0.122-0ubuntu1~22.04.1
    • 6.0.123-0ubuntu1~22.04.1
    • 6.0.124-0ubuntu1~22.04.1
    • 6.0.125-0ubuntu1~22.04.1
    • 6.0.126-0ubuntu1~22.04.1
    • 6.0.127-0ubuntu1~22.04.1
    • 6.0.128-0ubuntu1~22.04.2
    • 6.0.132-0ubuntu1~22.04.1
    • 6.0.133-0ubuntu1~22.04.1
    • 6.0.135-0ubuntu1~22.04.1
    • 6.0.136-0ubuntu1~22.04.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • dotnet7 Ubuntu:22.04:LTS

    Versions
    • 7.0.105-0ubuntu1~22.04.1
    • 7.0.107-0ubuntu1~22.04.1
    • 7.0.108-0ubuntu1~22.04.1
    • 7.0.109-0ubuntu1~22.04.1
    • 7.0.110-0ubuntu1~22.04.1
    • 7.0.111-0ubuntu1~22.04.1
    • 7.0.112-0ubuntu1~22.04.1
    • 7.0.113-0ubuntu1~22.04.1
    • 7.0.114-0ubuntu1~22.04.1
    • 7.0.115-0ubuntu1~22.04.1
    • 7.0.116-0ubuntu1~22.04.1
    • 7.0.117-0ubuntu1~22.04.1
    • 7.0.117-0ubuntu1~22.04.2
    • 7.0.119-0ubuntu1~22.04.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • dotnet8 Ubuntu:22.04:LTS

    Versions
    • 8.0.102-8.0.2-0ubuntu1~22.04.1
    • 8.0.103-8.0.3-0ubuntu1~22.04.1
    • 8.0.103-8.0.3-0ubuntu1~22.04.2
    • 8.0.105-8.0.5-0ubuntu1~22.04.1
    • 8.0.107-8.0.7-0ubuntu1~22.04.1
    • 8.0.108-8.0.8-0ubuntu1~22.04.1
    • 8.0.110-8.0.10-0ubuntu1~22.04.1
    • 8.0.111-8.0.11-0ubuntu1~22.04.1
    • 8.0.112-8.0.12-0ubuntu1~22.04.1
    • 8.0.114-8.0.14-0ubuntu1~22.04.1
    • 8.0.115-8.0.15-0ubuntu1~22.04.1
    • 8.0.116-8.0.16-0ubuntu1~22.04.1
    • 8.0.117-8.0.17-0ubuntu1~22.04.1
    • 8.0.118-8.0.18-0ubuntu1~22.04.1
    • 8.0.119-8.0.19-0ubuntu1~22.04.1
    • 8.0.120-8.0.20-0ubuntu1~22.04.1
    • 8.0.121-8.0.21-0ubuntu1~22.04.1
    • 8.0.122-8.0.22-0ubuntu1~22.04.1
    • 8.0.123-8.0.23-0ubuntu1~22.04.1
    • 8.0.124-8.0.24-0ubuntu1~22.04.1
    • 8.0.125-8.0.25-0ubuntu1~22.04.1
    • 8.0.126-8.0.26-0ubuntu1~22.04.1
    • 8.0.127-8.0.27-0ubuntu1~22.04.1
    • 8.0.128-8.0.28-0ubuntu1~22.04.1
    Affected ranges
    • ECOSYSTEM: < 8.0.129-8.0.29-0ubuntu1~22.04.1

    Update to 8.0.129-8.0.29-0ubuntu1~22.04.1

  • dotnet10 Ubuntu:24.04:LTS

    Versions
    • 10.0.100-10.0.0-0ubuntu1~24.04.1
    • 10.0.101-10.0.1-0ubuntu1~24.04.2
    • 10.0.103-10.0.3-0ubuntu1~24.04.1
    • 10.0.104-10.0.4-0ubuntu1~24.04.1
    • 10.0.105-10.0.5-0ubuntu1~24.04.1
    • 10.0.106-10.0.6-0ubuntu1~24.04.1
    • 10.0.107-10.0.7-0ubuntu1~24.04.1
    • 10.0.108-10.0.8-0ubuntu1~24.04.1
    • 10.0.109-10.0.9-0ubuntu1~24.04.1
    Affected ranges
    • ECOSYSTEM: < 10.0.110-10.0.10-0ubuntu1~24.04.1

    Update to 10.0.110-10.0.10-0ubuntu1~24.04.1

  • dotnet8 Ubuntu:24.04:LTS

    Versions
    • 8.0.100-8.0.0~rc1-0ubuntu1
    • 8.0.100-8.0.0~rc2-0ubuntu1
    • 8.0.100-8.0.0~rc2-0ubuntu2
    • 8.0.100-8.0.0-0ubuntu1
    • 8.0.100-8.0.0-0ubuntu2
    • 8.0.101-8.0.1-0ubuntu1
    • 8.0.101-8.0.1-0ubuntu2
    • 8.0.102-8.0.2-0ubuntu1
    • 8.0.103-8.0.3-0ubuntu2
    • 8.0.103-8.0.3-0ubuntu3
    • 8.0.104-8.0.4-0ubuntu1
    • 8.0.105-8.0.5-0ubuntu1~24.04.1
    • 8.0.107-8.0.7-0ubuntu1~24.04.1
    • 8.0.108-8.0.8-0ubuntu1~24.04.1
    • 8.0.108-8.0.8-0ubuntu1~24.04.2
    • 8.0.110-8.0.10-0ubuntu1~24.04.1
    • 8.0.111-8.0.11-0ubuntu1~24.04.1
    • 8.0.112-8.0.12-0ubuntu1~24.04.1
    • 8.0.114-8.0.14-0ubuntu1~24.04.1
    • 8.0.115-8.0.15-0ubuntu1~24.04.1
    • 8.0.116-8.0.16-0ubuntu1~24.04.1
    • 8.0.117-8.0.17-0ubuntu1~24.04.1
    • 8.0.118-8.0.18-0ubuntu1~24.04.1
    • 8.0.119-8.0.19-0ubuntu1~24.04.1
    • 8.0.120-8.0.20-0ubuntu1~24.04.1
    • 8.0.121-8.0.21-0ubuntu1~24.04.1
    • 8.0.122-8.0.22-0ubuntu1~24.04.1
    • 8.0.123-8.0.23-0ubuntu1~24.04.1
    • 8.0.124-8.0.24-0ubuntu1~24.04.1
    • 8.0.125-8.0.25-0ubuntu1~24.04.1
    • 8.0.126-8.0.26-0ubuntu1~24.04.1
    • 8.0.127-8.0.27-0ubuntu1~24.04.1
    • 8.0.128-8.0.28-0ubuntu1~24.04.1
    Affected ranges
    • ECOSYSTEM: < 8.0.129-8.0.29-0ubuntu1~24.04.1

    Update to 8.0.129-8.0.29-0ubuntu1~24.04.1

  • dotnet10 Ubuntu:26.04:LTS

    Versions
    • 10.0.100-10.0.0~rc1-0ubuntu1
    • 10.0.100-10.0.0~rc2-0ubuntu1
    • 10.0.100-10.0.0-0ubuntu1
    • 10.0.100-10.0.0-0ubuntu2
    • 10.0.101-10.0.1-0ubuntu1
    • 10.0.101-10.0.1-0ubuntu2
    • 10.0.101-10.0.1-0ubuntu3
    • 10.0.102-10.0.2-0ubuntu1
    • 10.0.103-10.0.3-0ubuntu1
    • 10.0.104-10.0.4-0ubuntu1
    • 10.0.105-10.0.5-0ubuntu1
    • 10.0.107-10.0.7-0ubuntu1~26.04.1
    • 10.0.108-10.0.8-0ubuntu1~26.04.1
    • 10.0.109-10.0.9-0ubuntu1~26.04.1
    Affected ranges
    • ECOSYSTEM: < 10.0.110-10.0.10-0ubuntu1~26.04.1

    Update to 10.0.110-10.0.10-0ubuntu1~26.04.1

Original sources

Check your server →