{"id":"CVE-2026-50526","aliases":[],"cve":{"records":[{"id":"CVE-2026-50526","source":"microsoft","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-06-04T19:00:41.293Z","published":"2026-07-14T19:29:54.992Z","modified":"2026-10-28T20:04:44.376Z"}],"publishers":[{"name":"microsoft","role":"CNA","organizationId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","modified":"2026-10-28T20:04:44.376Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-07-15T10:37:24.524Z"}],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50526","tags":["vendor-advisory","patch"],"source":"microsoft"}],"weaknesses":[{"id":"CWE-59","description":"CWE-59: Improper Link Resolution Before File Access ('Link Following')","source":"microsoft"},{"id":"CWE-345","description":"CWE-345: Insufficient Verification of Data Authenticity","source":"microsoft"}],"applicability":[{"source":"microsoft","statements":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*","versionStartIncluding":"17.12.0","versionEndExcluding":"17.12.22"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*","versionStartIncluding":"9.0.0","versionEndExcluding":"9.0.18"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0.0","versionEndExcluding":"8.0.29"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0.0","versionEndExcluding":"10.0.10"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio_2026:*:*:*:*:*:*:*:*","versionStartIncluding":"18.0","versionEndExcluding":"18.7.4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*","versionStartIncluding":"17.14.0","versionEndExcluding":"17.14.36"}]}]}]}],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-07-15T03:59:34.142603Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"total"}]}]},"title":".NET Tampering Vulnerability","titleSource":"microsoft","descriptionSource":"microsoft","description":"Improper link resolution before file access ('link following') in .NET allows an authorized attacker to perform tampering locally.","score":7,"severity":"high","published":"2026-07-14T19:29:54.992Z","modified":"2026-10-28T20:04:44.376Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Microsoft","name":".NET 10.0 runtime","platforms":[],"versions":[{"version":"10.0.0","status":"affected","lessThan":"10.0.10","versionType":"custom"}],"cpes":[],"source":"microsoft","url":"https://www.cve.org/CVERecord?id=CVE-2026-50526"},{"vendor":"Microsoft","name":".NET 8.0 runtime","platforms":[],"versions":[{"version":"8.0.0","status":"affected","lessThan":"8.0.29","versionType":"custom"}],"cpes":[],"source":"microsoft","url":"https://www.cve.org/CVERecord?id=CVE-2026-50526"},{"vendor":"Microsoft","name":".NET 9.0 runtime","platforms":[],"versions":[{"version":"9.0.0","status":"affected","lessThan":"9.0.18","versionType":"custom"}],"cpes":[],"source":"microsoft","url":"https://www.cve.org/CVERecord?id=CVE-2026-50526"},{"vendor":"Microsoft","name":"Microsoft Visual Studio 2022 version 17.12","platforms":[],"versions":[{"version":"17.12.0","status":"affected","lessThan":"17.12.22","versionType":"custom"}],"cpes":[],"source":"microsoft","url":"https://www.cve.org/CVERecord?id=CVE-2026-50526"},{"vendor":"Microsoft","name":"Microsoft Visual Studio 2022 version 17.14","platforms":[],"versions":[{"version":"17.14.0","status":"affected","lessThan":"17.14.36","versionType":"custom"}],"cpes":[],"source":"microsoft","url":"https://www.cve.org/CVERecord?id=CVE-2026-50526"},{"vendor":"Microsoft","name":"Microsoft Visual Studio 2026 version 18.7","platforms":[],"versions":[{"version":"18.0","status":"affected","lessThan":"18.7.4","versionType":"custom"}],"cpes":[],"source":"microsoft","url":"https://www.cve.org/CVERecord?id=CVE-2026-50526"}],"remediation":[],"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50526"],"sources":[{"name":"CVE","id":"CVE-2026-50526","modified":"2026-10-28T20:04:44.376Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-50526"}],"assessments":[{"source":"microsoft","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","score":7}],"sourceAffected":[],"observedAt":"2026-10-29T14:39:22.997Z","kev":{"status":"not-listed","checkedAt":"2026-10-31T00:50:33.640Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[],"aiSummary":{"text":"An authorized attacker can perform tampering locally in .NET due to improper link resolution before file access. This affects .NET 8.0, 9.0, and 10.0 runtime versions before 8.0.29, 9.0.18, and 10.0.10, respectively. Microsoft Visual Studio 2022 and 2026 versions are also affected.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-10-30T09:53:43.977Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-50526"}]}}