CVE-2026-96224
Fixed upstream EPSS <1%CVSS 8.8
Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.
Products: Microsoft .NET 10.0 runtime, Microsoft .NET 11.0 runtime, Microsoft .NET 8.0 runtime, Microsoft .NET 9.0 runtime, Microsoft .NET Framework 3.5, Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Framework 3.5 AND 4.7.2, Microsoft .NET Framework 3.5 AND 4.8, Microsoft .NET Framework 3.5 AND 4.8.1, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.8, Microsoft .NET Framework 4.8.1, Microsoft Visual Studio 2022 version 17.14, Microsoft Visual Studio 2026 version 18.10
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| NuGet | Microsoft.WindowsDesktop.App.Runtime.win-arm64 | 10.0.13 |
| NuGet | Microsoft.WindowsDesktop.App.Runtime.win-arm64 | 11.0.0-rc.2 |
| NuGet | Microsoft.WindowsDesktop.App.Runtime.win-arm64 | 8.0.32 |
| NuGet | Microsoft.WindowsDesktop.App.Runtime.win-arm64 | 9.0.21 |
| NuGet | Microsoft.WindowsDesktop.App.Runtime.win-x64 | 10.0.13 |
| NuGet | Microsoft.WindowsDesktop.App.Runtime.win-x64 | 11.0.0-rc.2 |
| NuGet | Microsoft.WindowsDesktop.App.Runtime.win-x64 | 8.0.32 |
| NuGet | Microsoft.WindowsDesktop.App.Runtime.win-x64 | 9.0.21 |
| NuGet | Microsoft.WindowsDesktop.App.Runtime.win-x86 | 10.0.13 |
| NuGet | Microsoft.WindowsDesktop.App.Runtime.win-x86 | 11.0.0-rc.2 |
| NuGet | Microsoft.WindowsDesktop.App.Runtime.win-x86 | 8.0.32 |
| NuGet | Microsoft.WindowsDesktop.App.Runtime.win-x86 | 9.0.21 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu 22.04 LTS | dotnet7 | no fix |