CVE-2026-62902
CVE-2026-62902 · .NET Information Disclosure Vulnerability
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to disclose information over a network.
CVSS 6.5 · Medium · EPSS 0.9% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
.net 8.0 runtime
- Versions
- ≥ 8.0.0, < 8.0.30: Affected (custom)
Update to 8.0.30
.net 9.0 runtime
- Versions
- ≥ 9.0.0, < 9.0.19: Affected (custom)
Update to 9.0.19
microsoft visual studio 2022 version 17.14
- Versions
- ≥ 17.14.0, < 17.14.38: Affected (custom)
Update to 17.14.38
microsoft visual studio 2026 version 18.8
- Versions
- ≥ 18.0, < 18.8.3: Affected (custom)
Update to 18.8.3
dotnet7 Ubuntu:22.04:LTS
- Versions
- 7.0.105-0ubuntu1~22.04.1
- 7.0.107-0ubuntu1~22.04.1
- 7.0.108-0ubuntu1~22.04.1
- 7.0.109-0ubuntu1~22.04.1
- 7.0.110-0ubuntu1~22.04.1
- 7.0.111-0ubuntu1~22.04.1
- 7.0.112-0ubuntu1~22.04.1
- 7.0.113-0ubuntu1~22.04.1
- 7.0.114-0ubuntu1~22.04.1
- 7.0.115-0ubuntu1~22.04.1
- 7.0.116-0ubuntu1~22.04.1
- 7.0.117-0ubuntu1~22.04.1
- 7.0.117-0ubuntu1~22.04.2
- 7.0.119-0ubuntu1~22.04.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published