Read the docs
TI-2026-44935 Aliases CVE-2026-62872GHSA-43g4-v893-w7hq

.NET Framework Elevation of Privilege Vulnerability

Priority MEDIUM 41CWE-863Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Privilege escalation
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and Microsoft. Impact type from Microsoft.

Summary

Incorrect authorization in .NET Framework allows an authorized attacker to elevate privileges over a network.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00778 56th percentileScored 2026-11-07
Fix Fixed Microsoft: 19 updates

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
MicrosoftMicrosoft .NET Framework 3.53.5.0 to before 2.0.50727.9183 & 3.0.30729.91692.0.50727.9183 & 3.0.30729.9169Patch availableCNA
MicrosoftMicrosoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.23.0.0.0 to before 2.0.50727.8984 & 3.0.30729.8980 & 4.7.4144.02.0.50727.8984 & 3.0.30729.8980 & 4.7.4144.0Patch availableCNA
MicrosoftMicrosoft .NET Framework 3.5 AND 4.7.24.7.0 to before 2.0.50727.9070 & 3.0.30729.9068 & 4.7.4144.02.0.50727.9070 & 3.0.30729.9068 & 4.7.4144.0Patch availableCNA
MicrosoftMicrosoft .NET Framework 3.5 AND 4.84.8.0 to before 2.0.50727.9070 & 3.0.30729.9068 & 4.8.4805.02.0.50727.9070 & 3.0.30729.9068 & 4.8.4805.0Patch availableCNA
MicrosoftMicrosoft .NET Framework 3.5 AND 4.8.14.8.1 to before 2.0.50727.9183 & 3.0.30729.9169 & 4.8.9343.02.0.50727.9183 & 3.0.30729.9169 & 4.8.9343.0Patch availableCNA
MicrosoftMicrosoft .NET Framework 4.6.2/4.7/4.7.1/4.7.24.7.0 to before 4.7.4144.04.7.4144.0Patch availableCNA
MicrosoftMicrosoft .NET Framework 4.84.8.0 to before 4.8.4805.04.8.4805.0Patch availableCNA
MicrosoftMicrosoft .NET Framework 4.8.14.8.0.0 to before 4.8.9344.04.8.9344.0Patch availableCNA
  • Microsoft .NET Framework 3.5 VendorMicrosoft Affected 3.5.0 to before 2.0.50727.9183 & 3.0.30729.9169 Fixed in 2.0.50727.9183 & 3.0.30729.9169 Patch available CNA
  • Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 VendorMicrosoft Affected 3.0.0.0 to before 2.0.50727.8984 & 3.0.30729.8980 & 4.7.4144.0 Fixed in 2.0.50727.8984 & 3.0.30729.8980 & 4.7.4144.0 Patch available CNA
  • Microsoft .NET Framework 3.5 AND 4.7.2 VendorMicrosoft Affected 4.7.0 to before 2.0.50727.9070 & 3.0.30729.9068 & 4.7.4144.0 Fixed in 2.0.50727.9070 & 3.0.30729.9068 & 4.7.4144.0 Patch available CNA
  • Microsoft .NET Framework 3.5 AND 4.8 VendorMicrosoft Affected 4.8.0 to before 2.0.50727.9070 & 3.0.30729.9068 & 4.8.4805.0 Fixed in 2.0.50727.9070 & 3.0.30729.9068 & 4.8.4805.0 Patch available CNA
  • Microsoft .NET Framework 3.5 AND 4.8.1 VendorMicrosoft Affected 4.8.1 to before 2.0.50727.9183 & 3.0.30729.9169 & 4.8.9343.0 Fixed in 2.0.50727.9183 & 3.0.30729.9169 & 4.8.9343.0 Patch available CNA
  • Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 VendorMicrosoft Affected 4.7.0 to before 4.7.4144.0 Fixed in 4.7.4144.0 Patch available CNA
  • Microsoft .NET Framework 4.8 VendorMicrosoft Affected 4.8.0 to before 4.8.4805.0 Fixed in 4.8.4805.0 Patch available CNA
  • Microsoft .NET Framework 4.8.1 VendorMicrosoft Affected 4.8.0.0 to before 4.8.9344.0 Fixed in 4.8.9344.0 Patch available CNA

CPE configurations NVD · 31

CPEVersionsRoleVendor
cpe:2.3:a:microsoft:.net_framework:4.8.1:*:*:*:*:*:*:*4.8.1VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_11_26h1:-:*:*:*:*:*:arm64:*not specified by NVDRunning onMicrosoft
cpe:2.3:o:microsoft:windows_11_26h1:-:*:*:*:*:*:x64:*not specified by NVDRunning onMicrosoft
cpe:2.3:a:microsoft:.net_framework:4.8:*:*:*:*:*:*:*4.8VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x64:*not specified by NVDRunning onMicrosoft
cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x86:*not specified by NVDRunning onMicrosoft
cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*not specified by NVDRunning onMicrosoft
cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*r2Running onMicrosoft
cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*not specified by NVDRunning onMicrosoft
cpe:2.3:a:microsoft:.net_framework:4.6.2:*:*:*:*:*:*:*4.6.2VulnerableMicrosoft
  • cpe:2.3:a:microsoft:.net_framework:4.8.1:*:*:*:*:*:*:* Versions 4.8.1 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_11_26h1:-:*:*:*:*:*:arm64:* Versions not specified by NVD Running on ·Microsoft
  • cpe:2.3:o:microsoft:windows_11_26h1:-:*:*:*:*:*:x64:* Versions not specified by NVD Running on ·Microsoft
  • cpe:2.3:a:microsoft:.net_framework:4.8:*:*:*:*:*:*:* Versions 4.8 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x64:* Versions not specified by NVD Running on ·Microsoft
  • cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x86:* Versions not specified by NVD Running on ·Microsoft
  • cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Microsoft
  • cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:* Versions r2 Running on ·Microsoft
  • cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Microsoft
  • cpe:2.3:a:microsoft:.net_framework:4.6.2:*:*:*:*:*:*:* Versions 4.6.2 Vulnerable ·Microsoft
Show 21 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:microsoft:.net_framework:4.7:*:*:*:*:*:*:*4.7VulnerableMicrosoft
cpe:2.3:a:microsoft:.net_framework:4.7.1:*:*:*:*:*:*:*4.7.1VulnerableMicrosoft
cpe:2.3:a:microsoft:.net_framework:4.7.2:*:*:*:*:*:*:*4.7.2VulnerableMicrosoft
cpe:2.3:a:microsoft:.net_framework:3.5:-:*:*:*:*:*:*3.5VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:arm64:*not specified by NVDRunning onMicrosoft
cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x64:*not specified by NVDRunning onMicrosoft
cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x86:*not specified by NVDRunning onMicrosoft
cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:arm64:*not specified by NVDRunning onMicrosoft
cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x64:*not specified by NVDRunning onMicrosoft
cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x86:*not specified by NVDRunning onMicrosoft
cpe:2.3:o:microsoft:windows_11_23h2:-:*:*:*:*:*:arm64:*not specified by NVDRunning onMicrosoft
cpe:2.3:o:microsoft:windows_11_23h2:-:*:*:*:*:*:x64:*not specified by NVDRunning onMicrosoft
cpe:2.3:o:microsoft:windows_11_24h2:-:*:*:*:*:*:arm64:*not specified by NVDRunning onMicrosoft
cpe:2.3:o:microsoft:windows_11_24h2:-:*:*:*:*:*:x64:*not specified by NVDRunning onMicrosoft
cpe:2.3:o:microsoft:windows_11_25h2:-:*:*:*:*:*:arm64:*not specified by NVDRunning onMicrosoft
cpe:2.3:o:microsoft:windows_11_25h2:-:*:*:*:*:*:x64:*not specified by NVDRunning onMicrosoft
cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*not specified by NVDRunning onMicrosoft
cpe:2.3:o:microsoft:windows_server_2025:-:*:*:*:*:*:x64:*not specified by NVDRunning onMicrosoft
cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x64:*not specified by NVDRunning onMicrosoft
cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x86:*not specified by NVDRunning onMicrosoft
cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*not specified by NVDRunning onMicrosoft
  • cpe:2.3:a:microsoft:.net_framework:4.7:*:*:*:*:*:*:* Versions 4.7 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:.net_framework:4.7.1:*:*:*:*:*:*:* Versions 4.7.1 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:.net_framework:4.7.2:*:*:*:*:*:*:* Versions 4.7.2 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:.net_framework:3.5:-:*:*:*:*:*:* Versions 3.5 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:arm64:* Versions not specified by NVD Running on ·Microsoft
  • cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x64:* Versions not specified by NVD Running on ·Microsoft
  • cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x86:* Versions not specified by NVD Running on ·Microsoft
  • cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:arm64:* Versions not specified by NVD Running on ·Microsoft
  • cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x64:* Versions not specified by NVD Running on ·Microsoft
  • cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x86:* Versions not specified by NVD Running on ·Microsoft
  • cpe:2.3:o:microsoft:windows_11_23h2:-:*:*:*:*:*:arm64:* Versions not specified by NVD Running on ·Microsoft
  • cpe:2.3:o:microsoft:windows_11_23h2:-:*:*:*:*:*:x64:* Versions not specified by NVD Running on ·Microsoft
  • cpe:2.3:o:microsoft:windows_11_24h2:-:*:*:*:*:*:arm64:* Versions not specified by NVD Running on ·Microsoft
  • cpe:2.3:o:microsoft:windows_11_24h2:-:*:*:*:*:*:x64:* Versions not specified by NVD Running on ·Microsoft
  • cpe:2.3:o:microsoft:windows_11_25h2:-:*:*:*:*:*:arm64:* Versions not specified by NVD Running on ·Microsoft
  • cpe:2.3:o:microsoft:windows_11_25h2:-:*:*:*:*:*:x64:* Versions not specified by NVD Running on ·Microsoft
  • cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Microsoft
  • cpe:2.3:o:microsoft:windows_server_2025:-:*:*:*:*:*:x64:* Versions not specified by NVD Running on ·Microsoft
  • cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x64:* Versions not specified by NVD Running on ·Microsoft
  • cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x86:* Versions not specified by NVD Running on ·Microsoft
  • cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Microsoft

Remediation

Microsoft 19 updates

  • KB5120747
    Security Update
    • Microsoft .NET Framework 3.5 2.0.50727.9183 & 3.0.30729.9169
  • KB5120716
    Security Update
    • Microsoft .NET Framework 3.5 2.0.50727.8984 & 3.0.30729.8980
  • KB5120714
    Security Update
    • Microsoft .NET Framework 3.5 AND 4.8.1 2.0.50727.9183 & 3.0.30729.9169 & 4.8.9343.0
Show 16 more Microsoft updates
  • KB5120713
    Security Update
    • Microsoft .NET Framework 3.5 AND 4.8.1 2.0.50727.9183 & 3.0.30729.9169 & 4.8.9343.0
  • KB5120711
    Security Update
    • Microsoft .NET Framework 4.8.1 4.8.9344.0
  • KB5120710
    Security Update
    • Microsoft .NET Framework 3.5 AND 4.8.1 2.0.50727.9183 & 3.0.30729.9169 & 4.8.9343.0
  • KB5120709
    Security Update
    • Microsoft .NET Framework 3.5 AND 4.8.1 2.0.50727.9183 & 3.0.30729.9169 & 4.8.9343.0
  • KB5120708
    Security Update
    • Microsoft .NET Framework 3.5 AND 4.8.1 2.0.50727.9183 & 3.0.30729.9169 & 4.8.9344.0
  • KB5120706
    Security Update
    • Microsoft .NET Framework 4.8 4.8.4805.0
  • KB5120705
    Security Update
    • Microsoft .NET Framework 3.5 AND 4.8 2.0.50727.9183 & 3.0.30729.9169 & 4.8.4805.0
  • KB5120704
    Security Update
    • Microsoft .NET Framework 4.8 4.8.4805.0
  • KB5120703
    Security Update
    • Microsoft .NET Framework 3.5 AND 4.8 2.0.50727.9070 & 3.0.30729.9068 & 4.8.4805.0
  • KB5120702
    Security Update
    • Microsoft .NET Framework 4.8 4.8.4805.0
  • KB5120701
    Security Update
    • Microsoft .NET Framework 3.5 AND 4.8 2.0.50727.9183 & 3.0.30729.9169 & 4.8.4805.0
  • KB5120700
    Security Update
    • Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 4.7.4144.0
  • KB5120699
    Security Update
    • Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 4.7.4144.0
  • KB5120698
    Security Update
    • Microsoft .NET Framework 3.5 AND 4.7.2 2.0.50727.9070 & 3.0.30729.9068 & 4.7.4144.0
  • KB5120695
    Security Update
    • Microsoft .NET Framework 3.5 2.0.50727.8984 & 3.0.30729.8980, 3.0.50727.8984
  • KB5120418
    Security Update
    • Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 2.0.50727.8984 & 3.0.30729.8980 & 4.7.4144.0
    • Windows 10 Version 1607 for 32-bit Systems 10.0.14393.9418
    • Windows 10 Version 1607 for x64-based Systems 10.0.14393.9418
    • Windows Server 2016 10.0.14393.9418
    • Windows Server 2016 (Server Core installation) 10.0.14393.9418

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

Not affected: 5 products
  • Red Hat Enterprise Linux 10
  • Red Hat Enterprise Linux 8
  • Red Hat Enterprise Linux 9
  • Red Hat Hardened Images
  • Red Hat OpenShift Dev Spaces

Microsoft

Microsoft's page for this CVE →

Impact
Elevation of Privilege
Exploited
No
Publicly disclosed
No
Exploitability
Exploitation Less Likely

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-62872
  2. 2026-10-03 Alias added: GHSA-43g4-v893-w7hq

References

Patch 1

  • TI-2020-00622 XML injection in Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 KEVCVSS 3.1CRITICAL 9.8
  • TI-2020-01112 A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and… KEVCVSS 3.1HIGH 7.8
  • TI-2017-06273 Code injection in Microsoft .NET Framework KEVCVSS 3.1HIGH 7.8
  • TI-2015-01495 The Windows DirectWrite library, as used in Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1… KEVCVSS 3.1HIGH 7.8
  • TI-2024-19239 .NET Framework Information Disclosure Vulnerability KEVCVSS 3.1HIGH 7.5
  • TI-2023-18684 ASP.NET Elevation of Privilege Vulnerability CVSS 3.1HIGH 8.8
See all 206 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences