Snapshot of public data from 31 Oct 2026, 12:50:06. This data is not updated until the API is deployed.

CVE-2026-50527

Microsoft .NET 10.0 runtime

NormalCVSS 7.5 v3.1

Why this priority

Generic watch priority computed by public, versioned rules. It does not know your assets. See the glossary

This source does not allow its text to be republished here. Read the record at the source.

Vendor	Product	Versions
Microsoft	.NET 10.0 runtime	from 10.0.0 to 10.0.10 excluded
Microsoft	.NET 8.0 runtime	from 8.0.0 to 8.0.29 excluded
Microsoft	.NET 9.0 runtime	from 9.0.0 to 9.0.18 excluded
Microsoft	Microsoft .NET Framework 3.5 AND 4.7.2	from 4.7.0 to 2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0 excluded
Microsoft	Microsoft .NET Framework 3.5 AND 4.8	from 4.8.0 to 2.0.50727.9069 & 3.0.30729.9067 & 4.8.4803.0 excluded
Microsoft	Microsoft .NET Framework 3.5 AND 4.8.1	from 4.8.1 to 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0 excluded
Microsoft	Microsoft .NET Framework 3.5	from 3.5.0 to 2.0.50727.8983 & 3.0.30729.8978 excluded
Microsoft	Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2	from 4.7.0 to 4.7.4143.0 excluded
Microsoft	Microsoft .NET Framework 4.8	from 4.8.0 to 4.8.4803.0 excluded
Microsoft	Microsoft Visual Studio 2022 version 17.12	from 17.12.0 to 17.12.22 excluded
Microsoft	Microsoft Visual Studio 2022 version 17.14	from 17.14.0 to 17.14.36 excluded
Microsoft	Microsoft Visual Studio 2026 version 18.7	from 18.0 to 18.7.4 excluded

CVSS severity ? Technical severity score between 0 and 10, with its version (3.1, 4.0). See the glossary: 7.5 HIGH CVSS v3.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
KEV catalog ? CISA catalog of vulnerabilities with confirmed exploitation. Absence from the catalog does not prove absence of exploitation. See the glossary: Unknown
Exploitation: Not reported
EPSS probability ? Probability, between 0 and 1, that a vulnerability is exploited in the next 30 days, published daily by FIRST. Always dated. See the glossary: Unknown
Confidence ? Quality of the sources behind the record. It is not a risk score. See the glossary: High

Priority rules, version 1