Skip to content
OpenAdvisories
High MSRC-CVE-2026-96234 1 CVE

.NET Information Disclosure Vulnerability

Published Oct 13, 2026 · Updated Oct 30, 2026 · Revision 4

Vendor: Microsoft

Summary

Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

What type of information could be disclosed by this vulnerability?
Exploiting this vulnerability could allow the disclosure of credentials.

According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?
Successful exploitation of this vulnerability requires an attacker to take additional actions prior to exploitation to prepare the target environment.

Security updates
10.0.13 — https://support.microsoft.com/help/5130036
8.0.32 — https://support.microsoft.com/help/5130034
9.0.21 — https://support.microsoft.com/help/5130035
11.0.0-rc.2 — https://github.com/dotnet/announcements/issues/482
18.10.4 — https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-notes
17.14.42 — https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes

Vulnerabilities 1

Revision history

  1. #4

    Updated an acknowledgement. This is an informational change only.

  2. #3

    Updated an acknowledgement. This is an informational change only.

  3. #2

    Updated the Security Updates table to add KB article links for .NET 11.0 and download and KB article links for Microsoft Visual Studio. This is an informational change only; the fixed builds are unchanged.

  4. #1

    Information published.

References