جزئیات آسیب‌پذیری

CVE-2026-108398

Microsoft .NET Framework ANDMicrosoft .NET Framework

.NET Framework Security Feature Bypass Vulnerability

CVSS 3.1

8.8بالا

Untrusted search path in .NET Framework allows an authorized attacker to bypass a security feature locally.

امتیاز	نسخه	منبع	بردار
8.8بالا	3.1	CVEProject cvelistV5 (CNA) (microsoft)	`CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C`

فروشنده	محصول	نسخه‌ها	منبع
Microsoft	Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2	3.0.0.0 ≤ v < 2.0.50727.8987 AND 3.0.30729.8982 AND 4.7.4150.0	CVEProject cvelistV5 (CNA)
Microsoft	Microsoft .NET Framework 3.5 AND 4.7.2	4.7.0 ≤ v < 2.0.50727.9073 AND 3.0.30729.9070 AND 4.7.4150.0	CVEProject cvelistV5 (CNA)
Microsoft	Microsoft .NET Framework 3.5 AND 4.8	4.8.0 ≤ v < 2.0.50727.9073 AND 3.0.30729.9070 AND 4.8.4811.0	CVEProject cvelistV5 (CNA)
Microsoft	Microsoft .NET Framework 3.5 AND 4.8.1	4.8.1 ≤ v < 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0	CVEProject cvelistV5 (CNA)
Microsoft	Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2	4.7.0 ≤ v < 4.7.4150.0	CVEProject cvelistV5 (CNA)
Microsoft	Microsoft .NET Framework 4.8	4.8.0 ≤ v < 4.8.4811.0	CVEProject cvelistV5 (CNA)
Microsoft	Microsoft .NET Framework 4.8.1	4.8.0.0 ≤ v < 4.8.9363.0	CVEProject cvelistV5 (CNA)

۰٫۷۷٪

احتمال بهره‌برداری در ۳۰ روز

۵۵٫۹٪

صدک (نسبت به همه‌ی CVEها)