CVE-2026-62872

dotnet: .NET Framework: Elevation of Privilege via incorrect authorization

Loading…

Severity

Important

Red Hat Product Security

8.8

CVSS 3.1

Review impact separately from score.

Published · August 12, 2026

Updated · September 3, 2026

Description

A flaw was found in .NET Framework. An authorized attacker could exploit incorrect authorization over a network to elevate their privileges.

Statement

Red Hat ships cross-platform .NET runtimes (dotnet 8.0, 9.0, 10.0) on Linux. The .NET Framework runtime affected by this vulnerability is a Windows-only product distributed via Windows Update, which Red Hat has never shipped. The vulnerable code is not present in any Red Hat product.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 8.8
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-266 · Incorrect Privilege Assignment