CVE-2026-35433

Description

Improper input validation in .NET allows an unauthorized attacker to elevate privileges locally.

Traduire en français

Produits concernés

• Microsoft .NET 10.0
• Microsoft .NET 8.0
• Microsoft .NET 9.0
• Microsoft .NET Framework 3.5
• Microsoft .NET Framework 3.5 AND 4.7.2
• Microsoft .NET Framework 3.5 AND 4.8
• Microsoft .NET Framework 3.5 AND 4.8.1
• Microsoft .NET Framework 4.8
• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Red Hat Hardened Images
• Microsoft .net framework
• Microsoft .net

Scores CVSS

Faiblesses (CWE)

• CWE-20
• CWE-190

Références

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-35433 Vendor Advisory
• https://access.redhat.com/security/cve/CVE-2026-35433
• https://bugzilla.redhat.com/show_bug.cgi?id=2476577
• https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-35433.json

Ailleurs

• NVD
• CVE.org
• CIRCL Vulnerability-Lookup
• CERT-FR
• GitHub Advisories