{"id":"CVE-2026-96235","published":"2026-10-13T19:21:49.343","lastModified":"2026-10-14T04:18:58.440","description":"Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwes":["CWE-787"],"vendors":[],"products":[],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96235","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A .NET out-of-bounds write vulnerability allows remote attackers to execute arbitrary code on affected systems. This flaw occurs when the application processes untrusted input without proper bounds checking, potentially leading to complete system compromise.","exploitability":"Exploitation is moderately difficult requiring a network-based attack with specific input conditions, but can be achieved without authentication through crafted input processing.","blast_radius":"The vulnerability could impact any .NET application running on affected systems, potentially allowing attackers to gain full control over the affected server or application environment.","remediation":"Upgrade to .NET Framework 4.8.1 or later, or .NET Core 3.1.32 or later, as these versions contain the necessary patches for this vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","dotnet","network"],"model":"garnet-coder","analyzedAt":"2026-10-18T10:18:16.860Z"}}