CVE-2026-62872: Microsoft .NET Framework

High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days.

Incorrect authorization in .NET Framework allows an authorized attacker to elevate privileges over a network.

Affected products

• Microsoft .NET Framework: version 4.8.1 only; version 4.8 only; version 4.6.2 only; version 4.7 only; version 4.7.1 only; version 4.7.2 only; …

Published 2026-08-11. Last modified 2026-08-14.