CVE-2026-50650Patch(microsoft / .net)

LOWCVSS 7.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch microsoft .net systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Improper control of generation of code ('code injection') in .NET Framework allows an unauthorized attacker to elevate privileges locally.

1.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-94

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • .net
  • .net_framework
  • windows
  • windows_10_1607

Threat summary

  • Patch or workaround signal is available
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 2 signals
  • Technical details provided in 2 signals
  • Peaked 1d ago at 1 mentions (2026-07-15); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
Products
.net.net_frameworkwindowswindows_10_1607windows_10_1809windows_10_21h2windows_10_22h2windows_11_23h2windows_11_24h2windows_11_25h2

9 versions affected across 15 products

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-07-15: 1Mentions · 2026-07-18: 1Patch / Workaround · 2026-07-15: 1Patch / Workaround · 2026-07-18: 1Technical Details · 2026-07-15: 1Technical Details · 2026-07-18: 107-1507-18
Signal classification1 categories
Patch
2100.0%
Referenced assets2 URLs
Full discourse2 posts
  • VulniPulse@vulnipulse
    Patch

    ⚠️ Linux dotnet9-0 alert: CVE-2026-50650 (CVSS 7.8) Attackers could elevate privileges. Upgrade to a vendor-listed fixed release. https://vulnipulse.com/advisories/linux-cve-2026-50650 #Linux #dotnet90 #CyberSecurity #CVE

    Post summary

    The advisory announces CVE-2026-50650, details its privilege‑elevation impact, and advises upgrading to a vendor‑patched release.

    0000037
    6 followersView on X
  • Windows Forum@windowsforum
    Patch

    🪟 “Local-only” doesn’t mean harmless: CVE-2026-50650 lets attackers turn a .NET foothold into admin power. Patch July’s update before Windows hands out privilege upgrades for free. https://windowsforum.com/threads/cve-2026-50650-patch-net-privilege-escalation-in-july.438607/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #WindowsSecurity #PrivilegeEscalation #NetFramework #Cve202650650 https://t.co/dvh2Wrv3hJ

    Post summary

    CVE-2026-50650, a .NET privilege‑escalation flaw that can turn a local user into administrator, is set to be fixed by a July Windows update; users should apply the patch promptly.

    0000049
    1.2K followersView on X
CPE platform detail32 entries

32 of 32 entries

PartVendorProductVersionTarget SWTarget HW
Appmicrosoft.net---
Appmicrosoft.net_framework3.5--
Appmicrosoft.net_framework4.6.2--
Appmicrosoft.net_framework4.7--
Appmicrosoft.net_framework4.7.1--
Appmicrosoft.net_framework4.7.2--
Appmicrosoft.net_framework4.8--
Appmicrosoft.net_framework4.8.1--
OSmicrosoftwindows---
OSmicrosoftwindows_10_1607--x64
OSmicrosoftwindows_10_1607--x86
OSmicrosoftwindows_10_1809--x64
OSmicrosoftwindows_10_1809--x86
OSmicrosoftwindows_10_21h2--arm64
OSmicrosoftwindows_10_21h2--x64
OSmicrosoftwindows_10_21h2--x86
OSmicrosoftwindows_10_22h2--arm64
OSmicrosoftwindows_10_22h2--x64
OSmicrosoftwindows_10_22h2--x86
OSmicrosoftwindows_11_23h2--arm64
OSmicrosoftwindows_11_23h2--x64
OSmicrosoftwindows_11_24h2--arm64
OSmicrosoftwindows_11_24h2--x64
OSmicrosoftwindows_11_25h2--arm64
OSmicrosoftwindows_11_25h2--x64
OSmicrosoftwindows_11_26h1--arm64
OSmicrosoftwindows_11_26h1--x64
OSmicrosoftwindows_server_2012---
OSmicrosoftwindows_server_2012r2--
OSmicrosoftwindows_server_2016---
OSmicrosoftwindows_server_2019---
OSmicrosoftwindows_server_2022---

Explore more