BaselineWatch
Desk

CVE-2026-47304

9.8 critical SSVC exploitation: none Analyzed

Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.

Fix

Patch, vendor advisory and mitigation references on NVD 1

Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.

Change history 1

  1. First seenCVSS 9.8 · microsoftNVD modified 2026-10-28 20:17

Affected (CPE criteria) 13

  • cpe:2.3:a:microsoft:.net_framework:4.8.1:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:.net_framework:4.8:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:.net_framework:4.6.2:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:.net_framework:4.7:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:.net_framework:4.7.1:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:.net_framework:4.7.2:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:.net_framework:3.5:-:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:visual_studio_2017:*:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:visual_studio_2026:*:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:visual_studio_2026:18.5.0:*:*:*:*:*:*:*

References 1