Snapshot of public data from 31 Oct 2026, 12:50:06. This data is not updated until the API is deployed.

TACTICThreat Analysis & Cyber Threat Intelligence Center
System themeFrançais

Back to the watch

CVE-2026-50647

Microsoft .NET Framework 3.5 AND 4.7.2

NormalCVSS 7.5 v3.1

Why this priority

?

Generic watch priority computed by public, versioned rules. It does not know your assets. See the glossary

  • Score CVSS élevé (7.0 ou plus)

Description

This source does not allow its text to be republished here. Read the record at the source.

Affected products

VendorProductVersions
MicrosoftMicrosoft .NET Framework 3.5 AND 4.7.2
  • from 4.7.0 to 2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0 excluded
MicrosoftMicrosoft .NET Framework 3.5 AND 4.8
  • from 4.8.0 to 2.0.50727.9069 & 3.0.30729.9067 & 4.8.4803.0 excluded
MicrosoftMicrosoft .NET Framework 3.5 AND 4.8.1
  • from 4.8.1 to 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0 excluded
MicrosoftMicrosoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2
  • from 4.7.0 to 4.7.4143.0 excluded
MicrosoftMicrosoft .NET Framework 4.8
  • from 4.8.0 to 4.8.4803.0 excluded
MicrosoftMicrosoft .NET Framework 4.8.1
  • from 4.8.0.0 to 4.8.9340.0 excluded
MicrosoftWindows 10 Version 1607
  • from 10.0.14393.0 to 10.0.14393.9339 excluded
MicrosoftWindows 10 Version 1809
  • from 10.0.17763.0 to 10.0.17763.9020 excluded
MicrosoftWindows 10 Version 21H2
  • from 10.0.19044.0 to 10.0.19044.7548 excluded
MicrosoftWindows 10 Version 22H2
  • from 10.0.19045.0 to 10.0.19045.7548 excluded
MicrosoftWindows 11 Version 24H2
  • from 10.0.26100.0 to 10.0.26100.8875 excluded
MicrosoftWindows 11 Version 25H2
  • from 10.0.26200.0 to 10.0.26200.8875 excluded
MicrosoftWindows 11 version 26H1
  • from 10.0.28000.0 to 10.0.28000.2525 excluded
MicrosoftWindows Server 2012 (Server Core installation)
  • from 6.2.9200.0 to 6.2.9200.26226 excluded
MicrosoftWindows Server 2012 R2 (Server Core installation)
  • from 6.3.9600.0 to 6.3.9600.23291 excluded
MicrosoftWindows Server 2012 R2
  • from 6.3.9600.0 to 6.3.9600.23291 excluded
MicrosoftWindows Server 2012
  • from 6.2.9200.0 to 6.2.9200.26226 excluded
MicrosoftWindows Server 2016 (Server Core installation)
  • from 10.0.14393.0 to 10.0.14393.9339 excluded
MicrosoftWindows Server 2016
  • from 10.0.14393.0 to 10.0.14393.9339 excluded
MicrosoftWindows Server 2019 (Server Core installation)
  • from 10.0.17763.0 to 10.0.17763.9020 excluded
MicrosoftWindows Server 2019
  • from 10.0.17763.0 to 10.0.17763.9020 excluded
MicrosoftWindows Server 2022
  • from 10.0.20348.0 to 10.0.20348.5386 excluded
MicrosoftWindows Server 2025 (Server Core installation)
  • from 10.0.26100.0 to 10.0.26100.33158 excluded
MicrosoftWindows Server 2025
  • from 10.0.26100.0 to 10.0.26100.33158 excluded

Revision history

  1. Revision 2

  2. Revision 1

    New record

Qualification

CVSS severity
?

Technical severity score between 0 and 10, with its version (3.1, 4.0). See the glossary

7.5 HIGH CVSS v3.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
KEV catalog
?

CISA catalog of vulnerabilities with confirmed exploitation. Absence from the catalog does not prove absence of exploitation. See the glossary

Unknown
Exploitation
Not reported
EPSS probability
?

Probability, between 0 and 1, that a vulnerability is exploited in the next 30 days, published daily by FIRST. Always dated. See the glossary

Unknown
Confidence
?

Quality of the sources behind the record. It is not a risk score. See the glossary

High

Priority rules, version 1

Record

Published on
14 July 2026
Weaknesses (CWE)
CWE-835

Sources

References