Yüksek CVSS 7.8
CVE-2026-50650: .net Framework: kod enjeksiyonu
Açıklama (NVD)
Improper control of generation of code ('code injection') in .NET Framework allows an unauthorized attacker to elevate privileges locally.
Özet bilgiler
- Ürün
- Microsoft .net Framework
- CVSS v3.1
- 7.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - EPSS
- %0,46 (yüzdelik 40)
- CWE
- CWE-94
- Yama
- Mevcut
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| microsoft-.net-framework | 4.8 | 4.8 | — |
| microsoft-.net-framework | 4.6.2 | 4.6.2 | — |
| microsoft-.net-framework | 4.7 | 4.7 | — |
| microsoft-.net-framework | 4.7.1 | 4.7.1 | — |
| microsoft-.net-framework | 4.7.2 | 4.7.2 | — |
| microsoft-.net-framework | 3.5 | 3.5 | — |
| microsoft-.net-framework | 4.8.1 | 4.8.1 | — |
| microsoft-.net-framework | 3.5 | 3.5 | — |
| microsoft-.net-framework | 4.8 | 4.8 | — |
| microsoft-.net-framework | 3.5 | 3.5 | — |
| microsoft-.net-framework | 4.7.2 | 4.7.2 | — |
| microsoft-.net-framework | 3.5 | 3.5 | — |
| microsoft-.net | 8.0.0 | — | 8.0.29 |
| microsoft-.net | 9.0.0 | — | 9.0.18 |