// CVE · PUBLISHED 2026-07-14

CVE-2026-47304

Microsoft / .NET 10.0 runtime · Microsoft / .NET 8.0 runtime · Microsoft / .NET 9.0 runtime · +13

9.8 · CVSS 3.1Critical

Description

Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.

This product uses the NVD API but is not endorsed or certified by the NVD. CVSS scores do not establish exploitation.

Products: Microsoft / .NET 10.0 runtime · Microsoft / .NET 8.0 runtime · Microsoft / .NET 9.0 runtime · Microsoft / Microsoft .NET Framework 3.5 · Microsoft / Microsoft .NET Framework 3.5 AND 4.7.2 · Microsoft / Microsoft .NET Framework 3.5 AND 4.8 · Microsoft / Microsoft .NET Framework 3.5 AND 4.8.1 · Microsoft / Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 · Microsoft / Microsoft .NET Framework 4.8 · Microsoft / Microsoft .NET Framework 4.8.1 · Microsoft / Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8) · Microsoft / Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) · Microsoft / Microsoft Visual Studio 2022 version 17.12 · Microsoft / Microsoft Visual Studio 2022 version 17.14 · Microsoft / Microsoft Visual Studio 2026 version 18.5 · Microsoft / Microsoft Visual Studio 2026 version 18.7
Published: 14 Jul 2026
Modified: 28 Oct 2026
CVSS: 9.8 Critical (v3.1)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Score source: nvd@nist.gov
CWE: CWE-345, CWE-347
Record status: Analyzed