VulnSocial

CVE-2026-50646Patch(microsoft / .net)

LOWCVSS 7.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch microsoft .net systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally.

microsoft CVEsBack to dashboard
1.0/ 10 priority

Sources & remediation

Patch / fix
Weakness type (CWE)
CWE-502CWE-693

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • .net
  • .net_framework
  • visual_studio_2022
  • visual_studio_2026

Threat summary

  • Patch or workaround signal is available
  • 4 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 3 signals
  • Technical details provided in 4 signals
  • Disclosure: 1 classified signal
  • Peaked 2d ago at 2 mentions (2026-07-15); latest day: 1
  • 4 total mentions across 3 days

Affected systems

Vendors
microsoft
Products
.net.net_frameworkvisual_studio_2022visual_studio_2026windowswindows_10_1607windows_10_1809windows_10_21h2windows_10_22h2windows_11_23h2

9 versions affected across 17 products

Deep dive

Activity timeline4 mentions / 3d
01122Mentions · 2026-07-15: 2Mentions · 2026-07-18: 1Mentions · 2026-09-09: 1Patch / Workaround · 2026-07-15: 2Patch / Workaround · 2026-07-18: 1Technical Details · 2026-07-15: 2Technical Details · 2026-07-18: 1Technical Details · 2026-09-09: 107-1507-1809-09
Signal classification2 categories
Patch
375.0%
Disclosure
125.0%
Referenced assets4 URLs
Classification over time
DateTotalLabels
2026-07-152
Patch2
2026-07-181
Patch1
2026-09-091
Disclosure1
Full discourse4 posts
  • Kevin Gosse@KooKiz
    Patch

    The latest Microsoft Patch Tuesday included my first 3 CVEs 🥳 All RCEs, fixed in .NET 10.0.10. https://github.com/dotnet/core/blob/main/release-notes/10.0/10.0.10/10.0.10.md CVE-2026-56158 (which is 404, for some reason), CVE-2026-50646 (co-attributed to @Ky0toFu who found it faster than I did), and CVE-2026-50649.

    Post summary

    The post announces that three CVEs (all RCEs) are fixed in .NET 10.0.10, with no exploit details or active exploitation claims.

    3314953.3K
    5.8K followersView on X
  • DailyCVE@dailycve
    Disclosure

    🔴 #Windows Presentation Foundation (WPF) XAML Parsing Remote Code Execution, #CVE-2026-50646 (High) -DC-Sep2026-2254 https://dailycve.com/windows-presentation-foundation-wpf-xaml-parsing-remote-code-execution-cve-2026-50646-high-dc-sep2026-2254/

    Post summary

    The tweet announces a high‑severity Remote Code Execution vulnerability (CVE‑2026‑50646) in Windows Presentation Foundation’s XAML parsing, with a link to a detailed disclosure article.

    0000044
    237 followersView on X
  • VulniPulse@vulnipulse
    Patch

    ⚠️ Linux dotnet9-0 alert: CVE-2026-50646 (CVSS 7.8) Attackers could execute arbitrary code. Upgrade to a vendor-listed fixed release. https://vulnipulse.com/advisories/linux-cve-2026-50646 #Linux #dotnet90 #CyberSecurity #CVE

    Post summary

    CVE-2026-50646 poses an arbitrary code execution risk; a vendor‑released fix is available, with the advisory providing a direct upgrade link.

    0000039
    6 followersView on X
  • Windows Forum@windowsforum
    Patch

    🪟 Microsoft can’t decide whether this .NET flaw is RCE or privilege escalation, but attackers won’t care. Install the July patches on every affected Windows box before the debate becomes an incident. https://windowsforum.com/threads/cve-2026-50646-install-net-8-0-29-and-9-0-18-july-fixes.438602/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #VulnerabilityManagement #NetSecurity https://t.co/Bxoxqh0GRk

    Post summary

    The tweet urges users to apply the July .NET patches to address CVE‑2026‑50646, emphasizing patching over detailed exploit information.

    0000033
    1.2K followersView on X
CPE platform detail35 entries

35 of 35 entries

PartVendorProductVersionTarget SWTarget HW
Appmicrosoft.net---
Appmicrosoft.net_framework3.5--
Appmicrosoft.net_framework4.6.2--
Appmicrosoft.net_framework4.7--
Appmicrosoft.net_framework4.7.1--
Appmicrosoft.net_framework4.7.2--
Appmicrosoft.net_framework4.8--
Appmicrosoft.net_framework4.8.1--
Appmicrosoftvisual_studio_2022---
Appmicrosoftvisual_studio_2026---
OSmicrosoftwindows---
OSmicrosoftwindows_10_1607--x64
OSmicrosoftwindows_10_1607--x86
OSmicrosoftwindows_10_1809--arm64
OSmicrosoftwindows_10_1809--x64
OSmicrosoftwindows_10_1809--x86
OSmicrosoftwindows_10_21h2--arm64
OSmicrosoftwindows_10_21h2--x64
OSmicrosoftwindows_10_21h2--x86
OSmicrosoftwindows_10_22h2--arm64
OSmicrosoftwindows_10_22h2--x64
OSmicrosoftwindows_10_22h2--x86
OSmicrosoftwindows_11_23h2--arm64
OSmicrosoftwindows_11_23h2--x64
OSmicrosoftwindows_11_24h2--arm64
OSmicrosoftwindows_11_24h2--x64
OSmicrosoftwindows_11_25h2--arm64
OSmicrosoftwindows_11_25h2--x64
OSmicrosoftwindows_11_26h1--arm64
OSmicrosoftwindows_11_26h1--x64
OSmicrosoftwindows_server_2012---
OSmicrosoftwindows_server_2012r2--
OSmicrosoftwindows_server_2016---
OSmicrosoftwindows_server_2019---
OSmicrosoftwindows_server_2022---

Explore more

Back to dashboardmicrosoft CVEs.net vulnerabilities