CVE-2026-47304

Description

Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.

CVSS breakdown

Affected products

• microsoft / Microsoft .NET Framework 3.53.5.0 – 2.0.50727.8983 & 3.0.30729.8978
• microsoft / Microsoft .NET Framework 3.5 AND 4.7.24.7.0 – 2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0
• microsoft / Microsoft .NET Framework 3.5 AND 4.84.8.0 – 2.0.50727.9069 & 3.0.30729.9067 & 4.8.4803.0
• microsoft / Microsoft .NET Framework 3.5 AND 4.8.14.8.1 – 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0
• microsoft / Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.24.7.0 – 4.7.4143.0
• microsoft / Microsoft .NET Framework 4.84.8.0 – 4.8.4803.0
• microsoft / Microsoft .NET Framework 4.8.14.8.0.0 – 4.8.9340.0
• microsoft / Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
• microsoft / Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)
• microsoft / Microsoft Visual Studio 2022 version 17.1217.12.0 – 17.12.22
• microsoft / Microsoft Visual Studio 2022 version 17.1417.14.0 – 17.14.36
• microsoft / Microsoft Visual Studio 2026 version 18.5
• microsoft / Microsoft Visual Studio 2026 version 18.718.0 – 18.7.4
• microsoft / .net8.0.0 – 8.0.29
• microsoft / .NET 10.010.0.0 – 10.0.10
• microsoft / .NET 10.010.0.0 – 10.0.6
• microsoft / .NET 8.08.0.0 – 8.0.29
• microsoft / .NET 9.09.0.0 – 9.0.18
• microsoft / .net_framework4.7 – 4.7
• microsoft / .net_framework4.8.1 – 4.8.1
• microsoft / .net_framework4.8 – 4.8
• microsoft / .net_framework4.6.2 – 4.6.2
• microsoft / .net_framework4.7.1 – 4.7.1
• microsoft / .net_framework4.7.2 – 4.7.2
• microsoft / .net_framework3.5 – 3.5
• microsoft / visual_studio_201715.0 – 15.9
• microsoft / visual_studio_201916.0 – 16.11
• microsoft / visual_studio_202217.12.0 – 17.12.22
• microsoft / visual_studio_202618.7.0 – 18.7.4
• microsoft / visual_studio_202618.5.0 – 18.5.0

References

• VENDOR_ADVISORYhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47304