CVE-2026-62886
CVE-2026-62886 · .NET Elevation of Privilege Vulnerability
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally.
CVSS 7.8 · High · EPSS 0.5% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
microsoft .net framework 3.5
- Versions
- ≥ 3.5.0, < 2.0.50727.8987 AND 3.0.30729.8982: Affected (custom)
No fix published
microsoft .net framework 3.5 and 4.6.2/4.7/4.7.1/4.7.2
- Versions
- ≥ 3.0.0.0, < 2.0.50727.9073 AND 3.0.30729.9070 AND 4.7.4150.0: Affected (custom)
No fix published
microsoft .net framework 3.5 and 4.7.2
- Versions
- ≥ 4.7.0, < 2.0.50727.9070 & 3.0.30729.9068 & 4.7.4145.0: Affected (custom)
No fix published
microsoft .net framework 3.5 and 4.8
- Versions
- ≥ 4.8.0, < 2.0.50727.9073 AND 3.0.30729.9070 AND 4.8.4811.0: Affected (custom)
No fix published
microsoft .net framework 3.5 and 4.8.1
- Versions
- ≥ 4.8.1, < 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0: Affected (custom)
No fix published
microsoft .net framework 4.6.2/4.7/4.7.1/4.7.2
- Versions
- ≥ 4.7.0, < 4.7.4145.0: Affected (custom)
Update to 4.7.4145.0
microsoft .net framework 4.8
- Versions
- ≥ 4.8.0, < 4.8.4806.0: Affected (custom)
Update to 4.8.4806.0
microsoft .net framework 4.8.1
- Versions
- ≥ 4.8.0.0, < 4.8.9347.0: Affected (custom)
Update to 4.8.9347.0
microsoft visual studio 2026 version 18.8
- Versions
- ≥ 18.0, < 18.8.3: Affected (custom)
Update to 18.8.3
dotnet7 Ubuntu:22.04:LTS
- Versions
- 7.0.105-0ubuntu1~22.04.1
- 7.0.107-0ubuntu1~22.04.1
- 7.0.108-0ubuntu1~22.04.1
- 7.0.109-0ubuntu1~22.04.1
- 7.0.110-0ubuntu1~22.04.1
- 7.0.111-0ubuntu1~22.04.1
- 7.0.112-0ubuntu1~22.04.1
- 7.0.113-0ubuntu1~22.04.1
- 7.0.114-0ubuntu1~22.04.1
- 7.0.115-0ubuntu1~22.04.1
- 7.0.116-0ubuntu1~22.04.1
- 7.0.117-0ubuntu1~22.04.1
- 7.0.117-0ubuntu1~22.04.2
- 7.0.119-0ubuntu1~22.04.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published