Summary
Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
Details
What privileges could be gained by an attacker who successfully exploited this vulnerability?
An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.
According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?
Exploitation of this vulnerability requires that a user trigger the payload in the application.
Security updates
2.0.50727.8987 AND 3.0.30729.8982 — https://support.microsoft.com/help/5127660
4.7.4145.0 — https://support.microsoft.com/help/5126044
4.8.4806.0 — https://support.microsoft.com/help/5126049
4.8.4806.0 — https://support.microsoft.com/help/5126051
4.8.4806.0 — https://support.microsoft.com/help/5126047
2.0.50727.9073 AND 3.0.30729.9070 AND 4.7.4150.0 — https://support.microsoft.com/help/5127666
2.0.50727.9073 AND 3.0.30729.9070 AND 4.8.4811.0 — https://support.microsoft.com/help/5127685
2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 — https://support.microsoft.com/help/5127693
2.0.50727.9070 & 3.0.30729.9068 & 4.7.4145.0 — https://support.microsoft.com/help/5126043
2.0.50727.9070 & 3.0.30729.9068 & 4.8.4806.0 — https://support.microsoft.com/help/5126421
2.0.50727.9183 & 3.0.30729.9169 & 4.8.4806.0 — https://support.microsoft.com/help/5126046
2.0.50727.9183 & 3.0.30729.9169 & 4.8.9347.0 — https://support.microsoft.com/help/5126052
2.0.50727.9183 & 3.0.30729.9169 — https://support.microsoft.com/help/5120747
4.8.9347.0 — https://support.microsoft.com/help/5126053
2.0.50727.8987 AND 3.0.30729.8982 — https://support.microsoft.com/help/5127664
4.7.4145.0 — https://support.microsoft.com/help/5126045
2.0.50727.8987 AND 3.0.30729.8982 AND 4.7.4150.0 — https://support.microsoft.com/help/5126868
2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.4811.0 — https://support.microsoft.com/help/5127687
2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 — https://support.microsoft.com/help/5127690
2.0.50727.8984 & 3.0.30729.8980 & 4.7.4145.0 — https://support.microsoft.com/help/5123099
2.0.50727.9183 & 3.0.30729.9169 & 4.8.9347.0 — https://support.microsoft.com/help/5126424
10.0.11 — https://support.microsoft.com/help/5122106
8.0.30 — https://support.microsoft.com/help/5122104
9.0.19 — https://support.microsoft.com/help/5122105
2.0.50727.9188 AND 3.0.30729.9171 — https://support.microsoft.com/help/5127696
Vulnerabilities 1
-
High 7.8
.NET Elevation of Privilege Vulnerability
Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally.
Revision history
-
#3
Acknowledgement Updated
-
#2
Removed Linux and macOS products from the Affected Software table. This is an informational change only.
-
#1
Information published.
References
-
CVE-2026-62886 .NET Elevation of Privilege Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62886
-
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
-
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
-
Common Vulnerability Scoring System
https://www.first.org/cvss