{"id":"CVE-2026-108398","aliases":["EUVD-2026-99069","GHSA-895h-jx6m-8rp6"],"status":"published","title":".NET Framework Security Feature Bypass Vulnerability","description":"Untrusted search path in .NET Framework allows an authorized attacker to bypass a security feature locally.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-07","score":0.00779,"percentile":0.56125,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-426"],"published":"2026-10-13T18:59:30Z","modified":"2026-10-31T18:00:44Z","products":[{"vendor":"microsoft","product":"microsoft .net framework 3.5 and 4.6.2/4.7/4.7.1/4.7.2"},{"vendor":"microsoft","product":"microsoft .net framework 3.5 and 4.7.2"},{"vendor":"microsoft","product":"microsoft .net framework 3.5 and 4.8"},{"vendor":"microsoft","product":"microsoft .net framework 3.5 and 4.8.1"},{"vendor":"microsoft","product":"microsoft .net framework 4.6.2/4.7/4.7.1/4.7.2"},{"vendor":"microsoft","product":"microsoft .net framework 4.8"},{"vendor":"microsoft","product":"microsoft .net framework 4.8.1"}],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108398","tags":["vendor-advisory","patch"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108398"},{"url":"https://github.com/advisories/GHSA-895h-jx6m-8rp6"}],"sources":{"cve":[{"id":"CVE-2026-108398","title":".NET Framework Security Feature Bypass Vulnerability","description":"Untrusted search path in .NET Framework allows an authorized attacker to bypass a security feature locally.","status":"published","published":"2026-10-13T18:59:30.926Z","modified":"2026-10-31T18:00:44.621Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","level":"high","assessor":"cna"}],"cwes":["CWE-426"],"updated_at":"2026-11-02T14:20:10.510075Z"}],"euvd":[{"id":"EUVD-2026-99069","description":"Untrusted search path in .NET Framework allows an authorized attacker to bypass a security feature locally.","status":"published","published":"2026-10-13T18:59:30Z","modified":"2026-10-31T18:00:44Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","level":"high"}],"updated_at":"2026-11-02T16:58:55.979042Z"}],"ghsa":[{"id":"GHSA-895h-jx6m-8rp6","title":"Untrusted search path in .NET Framework allows an authorized attacker to bypass a security...","description":"Untrusted search path in .NET Framework allows an authorized attacker to bypass a security feature locally.","status":"published","published":"2026-10-13T21:33:25Z","modified":"2026-10-13T21:33:25Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-426"],"updated_at":"2026-11-02T15:13:13.272556Z"}],"nvd":[{"id":"CVE-2026-108398","description":"Untrusted search path in .NET Framework allows an authorized attacker to bypass a security feature locally.","status":"published","published":"2026-10-13T19:18:04.963Z","modified":"2026-10-13T23:17:30.117Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-426"],"updated_at":"2026-11-02T14:12:57.132005Z"}]}}