CVE-2026-96232

A flaw was found in .NET. This issue allows an unauthenticated remote attacker to trigger an out-of-bounds read, where the application reads memory outside of its intended boundaries. By sending specially crafted requests over the network, the attacker can access sensitive memory contents, leading to unauthorized information disclosure.

An out-of-bounds read vulnerability was found in .NET. An unauthenticated remote attacker could exploit this flaw by sending specially crafted network requests to an application running an affected .NET runtime or SDK. Successful exploitation allows the attacker to read memory outside of intended buffer boundaries, potentially exposing sensitive process memory without directly compromising system integrity or causing a denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.