CVE-2026-97801

CVE-2026-97801 · .NET Framework Tampering Vulnerability

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to perform tampering over a network.

CVSS 7.5 · High · EPSS 0.6% · Fix available

Affected products and versions

microsoft .net framework 3.5
Versions
- ≥ 3.5.0, < 2.0.50727.9188 AND 3.0.30729.9171: Affected (custom)
No fix published
microsoft .net framework 3.5 and 4.6.2/4.7/4.7.1/4.7.2
Versions
- ≥ 3.0.0.0, < 2.0.50727.8987 AND 3.0.30729.8982 AND 4.7.4150.0: Affected (custom)
No fix published
microsoft .net framework 3.5 and 4.7.2
Versions
- ≥ 4.7.0, < 2.0.50727.9073 AND 3.0.30729.9070 AND 4.7.4150.0: Affected (custom)
No fix published
microsoft .net framework 3.5 and 4.8
Versions
- ≥ 4.8.0, < 2.0.50727.9073 AND 3.0.30729.9070 AND 4.8.4811.0: Affected (custom)
No fix published
microsoft .net framework 3.5 and 4.8.1
Versions
- ≥ 4.8.1, < 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0: Affected (custom)
No fix published
microsoft .net framework 4.6.2/4.7/4.7.1/4.7.2
Versions
- ≥ 4.7.0, < 4.7.4150.0: Affected (custom)
Update to 4.7.4150.0
microsoft .net framework 4.8
Versions
- ≥ 4.8.0, < 4.8.4811.0: Affected (custom)
Update to 4.8.4811.0
microsoft .net framework 4.8.1
Versions
- ≥ 4.8.0.0, < 4.8.9363.0: Affected (custom)
Update to 4.8.9363.0