Veille CVE

Mercredi 14 octobre 2026

3 CVE

  1. CVE-2026-102869 8.8 Élevée

    Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 · Microsoft .NET Framework 3.5 AND 4.7.2 · Microsoft .NET Framework 3.5 AND 4.8 · Microsoft .NET Framework 3.5 AND 4.8.1

    Access of resource using incompatible type ('type confusion') in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network.

  2. CVE-2026-97801 7.5 Élevée

    Microsoft .NET Framework 3.5 · Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 · Microsoft .NET Framework 3.5 AND 4.7.2 · Microsoft .NET Framework 3.5 AND 4.8

    Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to perform tampering over a network.

  3. CVE-2026-108398 8.8 Élevée

    Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 · Microsoft .NET Framework 3.5 AND 4.7.2 · Microsoft .NET Framework 3.5 AND 4.8 · Microsoft .NET Framework 3.5 AND 4.8.1

    Untrusted search path in .NET Framework allows an authorized attacker to bypass a security feature locally.