PT-2026-58804 · Microsoft · .Net 10.0+5

Published 2026-07-14 · Updated 2026-07-14 · CVE-2026-50528

Mitre

CVSS v3.1

8.2

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N

Incorrect authorization in .NET allows an unauthorized attacker to bypass a security feature over a network.

Fix

Incorrect Authorization

Weakness Enumeration

CWE-302

CWE-636

CWE-863

Related Identifiers

CVE-2026-50528

Affected Products

.Net 10.0

.Net 8.0

.Net 9.0

Visual Studio 2022 Version 17.12

Visual Studio 2022 Version 17.14

Visual Studio 2026 Version 18.7

References · 2

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50528 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-50528 · Security Note