Veille CVE
CVE-2026-47304
9.8 CritiqueDescription
Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.
Produits concernés
- Microsoft .NET 10.0
- Microsoft .NET 8.0
- Microsoft .NET 9.0
- Microsoft .NET Framework 3.5
- Microsoft .NET Framework 3.5 AND 4.7.2
- Microsoft .NET Framework 3.5 AND 4.8
- Microsoft .NET Framework 3.5 AND 4.8.1
- Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2
- Microsoft .NET Framework 4.8
- Microsoft .NET Framework 4.8.1
- Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
- Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)
- Microsoft Visual Studio 2022 version 17.12
- Microsoft Visual Studio 2022 version 17.14
- Microsoft Visual Studio 2026 version 18.5
- Microsoft Visual Studio 2026 version 18.7
- Microsoft .net framework
- Microsoft .net
- Microsoft visual studio 2017
- Microsoft visual studio 2019
- Microsoft visual studio 2022
- Microsoft visual studio 2026
Scores CVSS
| Version | Score | Source | Vecteur |
|---|---|---|---|
| 3.1 | 8.1 Élevée | secure@microsoft.com | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H |
| 3.1 | 9.8 Critique | nvd@nist.gov (NVD) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Faiblesses (CWE)
Références
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47304 PatchVendor Advisory