CVE-2026-50528 – Microsoft .NET 10.0

CVSS 8.2 IMPORTANT High with EoP or RCE – Expedited Deployment

“A secure framework depends on every layer enforcing trust, validation, and resource protection.”

Microsoft has released security updates for .NET 10.0 that address twelve High severity vulnerabilities affecting authentication, authorization, resource management, memory safety, and input validation. Collectively, these fixes strengthen the framework against unauthorized access, privilege escalation, denial-of-service conditions, and memory-related security weaknesses that could impact applications built on affected .NET releases.

CVE-2026-47300 has a CVSS score of 8.8, High severity. CVE-2026-47303 has a CVSS score of 8.8, High severity. CVE-2026-50528 has a CVSS score of 8.2, High severity. CVE-2026-47302 has a CVSS score of 7.5, High severity. CVE-2026-50524 has a CVSS score of 7.5, High severity. CVE-2026-50525 has a CVSS score of 7.5, High severity. CVE-2026-50526 has a CVSS score of 7.0, High severity. CVE-2026-50527 has a CVSS score of 7.5, High severity. CVE-2026-50648 has a CVSS score of 7.5, High severity. CVE-2026-50651 has a CVSS score of 7.5, High severity. CVE-2026-56170 has a CVSS score of 7.5, High severity. CVE-2026-57108 has a CVSS score of 7.5, High severity. Based on the information provided, there is no verified public exploitation or proof-of-concept associated with these vulnerabilities.

Key Details

Affected Product: Microsoft .net
Attack Vector: Network
Attack Complexity: Low
Privileges Required: None
User Interaction: None
CWE Classification: CWE-302

Patch this CVE on all your endpoints in under 5 minutes. First 200 endpoints are free forever, scale as needed.