CVE-2026-85363
8.8HighPublished 13 Oct 2026 · NVD status: Awaiting Analysis · AI triage by gemini-3.8-flash
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
- Impact
- Full C/I/A compromise
- Weakness
- CWE-190
Impact
Remote attackers can gain elevated privileges by tricking an existing user into interacting with malicious content. The vulnerability requires user interaction over the network.
Root cause
An integer overflow or wraparound condition exists within .NET Framework processing.
Affected systems
Versions not listed — check the vendor advisory.
CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Fix & remediation
Check the Microsoft Security Update Guide advisory for the specific KB patch release for your installed .NET Framework version and apply it; no interim mitigation is documented.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileges over a network.