{"id":"CVE-2026-96224","published":"2026-10-13T19:21:48.333","lastModified":"2026-10-14T04:18:57.960","description":"Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwes":["CWE-787"],"vendors":[],"products":[],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96224","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A .NET out-of-bounds write vulnerability allows remote attackers to execute arbitrary code on affected systems. This is particularly concerning because it can be exploited over the network without authentication, making it highly impactful for exposed services.","exploitability":"Exploitation appears moderately difficult as it likely requires crafting a specific payload that triggers the out-of-bounds write condition, but the lack of public exploit references suggests it may require significant effort to develop a reliable exploit.","blast_radius":"The impact could be severe across any .NET application or service exposed to untrusted network traffic, potentially leading to full system compromise and lateral movement within the network.","remediation":"No fixed version is published. Disable the affected .NET functionality or restrict access to the named endpoint until a patch is available.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","dotnet","network"],"model":"garnet-coder","analyzedAt":"2026-10-18T10:18:06.818Z"}}