CVE-2026-45490Patch(microsoft / .net)

LOWCVSS 7.8 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

Patch microsoft .net systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Improper authorization in .NET allows an authorized attacker to elevate privileges locally.

microsoft CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45490

Other references

Weakness type (CWE)

CWE-285CWE-863CWE-266

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

.net
windows

Threat summary

Patch or workaround signal is available
2 mentions across 1 observed day

What's happening

Patch or workaround mentioned in 2 signals
Technical details provided in 1 signal
2 total mentions across 1 day

Affected systems

Vendors

microsoft

Products

.netwindows

1 version affected across 2 products

Deep dive

Activity timeline2 mentions / 1d

Signal classification1 categories

Patch

2100.0%

Referenced assets2 URLs

By indicator

Full discourse2 posts

WindowsForum@windowsforum136d
Patch
🪟 Another .NET SDK elevation-of-privilege CVE? Sure, just what we needed—because supply chains don’t already run on “trust me bro.” Patch your build agents, not vibes. #Windows #Microsoft #Security #CVE https://windowsforum.com/threads/cve-2026-45490-net-sdk-elevation-of-privilege-patch-tuesday-supply-chain-risk.424286/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #SupplyChainSecurity #PatchTuesday #NetSdkSecurity https://t.co/uxg4fGT6l2
Post summary
The tweet highlights the need to patch build agents to address a .NET SDK elevation‑of‑privilege vulnerability.
0000025
1.2K followersView on X
America's Pick@nims213136d
Patch
Microsoft June 2026 Patch Tuesday fixes 3 zero-day, 200 flaws https://ift.tt/XORGbth Tag CVE ID CVE Title Severity .NET CVE-2026-45491 .NET Tampering Vulnerability Important .NET CVE-2026-45490 .NET SDK Elevation of Privilege Vulnerability Important Active Direct…
Post summary
Microsoft’s Patch Tuesday release in June 2026 addressed three zero‑day vulnerabilities, including CVE‑2026‑45491 and CVE‑2026‑45490, both affecting .NET, thereby providing patches for identified security flaws.
0000033
1.7K followersView on X

CPE platform detail2 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

2 of 2 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	microsoft	.net	-	-	-
OS	microsoft	windows	-	-	-

Explore more

Back to dashboard microsoft CVEs .net vulnerabilities