CVE-2026-32177

No fix known EPSS <1%CVSS 7.3

Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally.

Published 2026-05-12 · CVE record · OSV

Products: Microsoft .NET 10.0, Microsoft .NET 8.0, Microsoft .NET 9.0, Microsoft .NET Framework 3.5, Microsoft .NET Framework 3.5 AND 4.7.2, Microsoft .NET Framework 3.5 AND 4.8, Microsoft .NET Framework 3.5 AND 4.8.1, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.8, Microsoft Visual Studio 2022 version 17.12, Microsoft Visual Studio 2022 version 17.14, Microsoft Visual Studio 2026 version 18.5, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Hardened Images

Distro releases