CVE-2026-62909High· 7.8▾ Twilight

.NET Elevation of Privilege Vulnerability

Uncaught exception in .NET allows an authorized attacker to elevate privileges locally.

▾ Twilight zone — High severity, or a signal on a lesser flaw

Depth score43/ 100 · Moderate

impact 42.9 · likelihood 0.1 · exploitation 0

⚡ Agent-ready:Raw markdown ↗JSON ↗

Proof of concept

Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.

…

Published

Aug 11, 2026

Updated

Sep 16, 2026

CVSS

7.8

Vendor

Microsoft

Product

.NET 10.0

CWE

CWE-252, CWE-248

Depth score

43 · Moderate

EPSS

0.29% · p22

Platforms

—

Source

CVEORG

Vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C

Scores by source

CNA 7.8 · GitHub 6.7

CISA SSVC

decided 2026-08-12

Exploitation: none
Automatable: no
Technical impact: total

Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.

EPSS history

Exploit-prediction probability, daily snapshots since Aug 12.

0.3% → 0.3%

Timeline

Disclosure to exploitation, from the record and what we observed since indexing it.

15 events · 36 days

Aug 11, 2026Published
Disclosed via CVEORG
Aug 12, 2026EPSS first tracked
0.3%
Sep 8, 2026CVSS changed
7.8 → 6.7
Sep 8, 2026Severity changed
high → medium
Sep 9, 2026CVSS changed
6.7 → 7.8
Sep 9, 2026Severity changed
medium → high
Sep 9, 2026CVSS changed
7.8 → 6.7
Sep 9, 2026Severity changed
high → medium
Sep 9, 2026CVSS changed
6.7 → 7.8
Sep 9, 2026Severity changed
medium → high
Sep 9, 2026CVSS changed
7.8 → 6.7
Sep 9, 2026Severity changed
high → medium
Sep 9, 2026CVSS changed
6.7 → 7.8
Sep 9, 2026Severity changed
medium → high
Sep 16, 2026Record revised
Last analysed / modified upstream

Microsoft CWE-252 CWE-248 #cve.org #ghsa #nuget

Affected

.net_10.0 >= 10.0.0 < 10.0.11
.net_8.0 >= 8.0.0 < 8.0.30
.net_9.0 >= 9.0.0 < 9.0.19
visual_studio_2022_version_17.14 >= 17.14.0 < 17.14.38
visual_studio_2026_version_18.8 >= 18.0 < 18.8.3

Patched in

Microsoft.NETCore.App.Runtime.linux-arm 10.0.11
Microsoft.NETCore.App.Runtime.linux-arm64 10.0.11
Microsoft.NETCore.App.Runtime.linux-musl-arm 10.0.11
Microsoft.NETCore.App.Runtime.linux-musl-arm64 10.0.11
Microsoft.NETCore.App.Runtime.linux-musl-x64 10.0.11
Microsoft.NETCore.App.Runtime.linux-x64 10.0.11
Microsoft.NETCore.App.Runtime.osx-arm64 10.0.11
Microsoft.NETCore.App.Runtime.osx-x64 10.0.11
Microsoft.NETCore.App.Runtime.linux-arm 9.0.19
Microsoft.NETCore.App.Runtime.linux-arm64 9.0.19
Microsoft.NETCore.App.Runtime.linux-musl-arm 9.0.19
Microsoft.NETCore.App.Runtime.linux-musl-arm64 9.0.19
Microsoft.NETCore.App.Runtime.linux-musl-x64 9.0.19
Microsoft.NETCore.App.Runtime.linux-x64 9.0.19
Microsoft.NETCore.App.Runtime.osx-arm64 9.0.19
Microsoft.NETCore.App.Runtime.osx-x64 9.0.19
Microsoft.NETCore.App.Runtime.linux-arm 8.0.30
Microsoft.NETCore.App.Runtime.linux-arm64 8.0.30
Microsoft.NETCore.App.Runtime.linux-musl-arm 8.0.30
Microsoft.NETCore.App.Runtime.linux-musl-arm64 8.0.30
Microsoft.NETCore.App.Runtime.linux-musl-x64 8.0.30
Microsoft.NETCore.App.Runtime.linux-x64 8.0.30
Microsoft.NETCore.App.Runtime.osx-arm64 8.0.30
Microsoft.NETCore.App.Runtime.osx-x64 8.0.30

Full technical detail▾

Overview

Uncaught exception in .NET allows an authorized attacker to elevate privileges locally.

Affected

.net_10.0 >= 10.0.0 < 10.0.11
.net_8.0 >= 8.0.0 < 8.0.30
.net_9.0 >= 9.0.0 < 9.0.19
visual_studio_2022_version_17.14 >= 17.14.0 < 17.14.38
visual_studio_2026_version_18.8 >= 18.0 < 18.8.3

Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

Package advisory (CVE-2026-62909)

Affected packages:

Microsoft.NETCore.App.Runtime.linux-arm >= 10.0.0, <= 10.0.10
Microsoft.NETCore.App.Runtime.linux-arm64 >= 10.0.0, <= 10.0.10
Microsoft.NETCore.App.Runtime.linux-musl-arm >= 10.0.0, <= 10.0.10
Microsoft.NETCore.App.Runtime.linux-musl-arm64 >= 10.0.0, <= 10.0.10
Microsoft.NETCore.App.Runtime.linux-musl-x64 >= 10.0.0, <= 10.0.10
Microsoft.NETCore.App.Runtime.linux-x64 >= 10.0.0, <= 10.0.10
Microsoft.NETCore.App.Runtime.osx-arm64 >= 10.0.0, <= 10.0.10
Microsoft.NETCore.App.Runtime.osx-x64 >= 10.0.0, <= 10.0.10
Microsoft.NETCore.App.Runtime.linux-arm >= 9.0.0, <= 9.0.18
Microsoft.NETCore.App.Runtime.linux-arm64 >= 9.0.0, <= 9.0.18
Microsoft.NETCore.App.Runtime.linux-musl-arm >= 9.0.0, <= 9.0.18
Microsoft.NETCore.App.Runtime.linux-musl-arm64 >= 9.0.0, <= 9.0.18
Microsoft.NETCore.App.Runtime.linux-musl-x64 >= 9.0.0, <= 9.0.18
Microsoft.NETCore.App.Runtime.linux-x64 >= 9.0.0, <= 9.0.18
Microsoft.NETCore.App.Runtime.osx-arm64 >= 9.0.0, <= 9.0.18
Microsoft.NETCore.App.Runtime.osx-x64 >= 9.0.0, <= 9.0.18
Microsoft.NETCore.App.Runtime.linux-arm >= 8.0.0, <= 8.0.29
Microsoft.NETCore.App.Runtime.linux-arm64 >= 8.0.0, <= 8.0.29
Microsoft.NETCore.App.Runtime.linux-musl-arm >= 8.0.0, <= 8.0.29
Microsoft.NETCore.App.Runtime.linux-musl-arm64 >= 8.0.0, <= 8.0.29
Microsoft.NETCore.App.Runtime.linux-musl-x64 >= 8.0.0, <= 8.0.29
Microsoft.NETCore.App.Runtime.linux-x64 >= 8.0.0, <= 8.0.29
Microsoft.NETCore.App.Runtime.osx-arm64 >= 8.0.0, <= 8.0.29
Microsoft.NETCore.App.Runtime.osx-x64 >= 8.0.0, <= 8.0.29

Patched in:

Microsoft.NETCore.App.Runtime.linux-arm 10.0.11
Microsoft.NETCore.App.Runtime.linux-arm64 10.0.11
Microsoft.NETCore.App.Runtime.linux-musl-arm 10.0.11
Microsoft.NETCore.App.Runtime.linux-musl-arm64 10.0.11
Microsoft.NETCore.App.Runtime.linux-musl-x64 10.0.11
Microsoft.NETCore.App.Runtime.linux-x64 10.0.11
Microsoft.NETCore.App.Runtime.osx-arm64 10.0.11
Microsoft.NETCore.App.Runtime.osx-x64 10.0.11
Microsoft.NETCore.App.Runtime.linux-arm 9.0.19
Microsoft.NETCore.App.Runtime.linux-arm64 9.0.19
Microsoft.NETCore.App.Runtime.linux-musl-arm 9.0.19
Microsoft.NETCore.App.Runtime.linux-musl-arm64 9.0.19
Microsoft.NETCore.App.Runtime.linux-musl-x64 9.0.19
Microsoft.NETCore.App.Runtime.linux-x64 9.0.19
Microsoft.NETCore.App.Runtime.osx-arm64 9.0.19
Microsoft.NETCore.App.Runtime.osx-x64 9.0.19
Microsoft.NETCore.App.Runtime.linux-arm 8.0.30
Microsoft.NETCore.App.Runtime.linux-arm64 8.0.30
Microsoft.NETCore.App.Runtime.linux-musl-arm 8.0.30
Microsoft.NETCore.App.Runtime.linux-musl-arm64 8.0.30
Microsoft.NETCore.App.Runtime.linux-musl-x64 8.0.30
Microsoft.NETCore.App.Runtime.linux-x64 8.0.30
Microsoft.NETCore.App.Runtime.osx-arm64 8.0.30
Microsoft.NETCore.App.Runtime.osx-x64 8.0.30

Source: https://github.com/advisories/GHSA-9mr8-pwpw-3j2w

References

Change history

Field changes observed since this record was first indexed.

Sep 9, 2026CVSS 6.7 → 7.8
Sep 9, 2026Severity medium → high
Sep 9, 2026CVSS 7.8 → 6.7
Sep 9, 2026Severity high → medium
Sep 9, 2026CVSS 6.7 → 7.8
Sep 9, 2026Severity medium → high
Sep 9, 2026CVSS 7.8 → 6.7
Sep 9, 2026Severity high → medium
Sep 9, 2026CVSS 6.7 → 7.8
Sep 9, 2026Severity medium → high
Sep 8, 2026CVSS 7.8 → 6.7
Sep 8, 2026Severity high → medium

Related vulnerabilities

Connected by shared product, vendor, weakness, or advisory.

#cve.org#ghsa#nuget

Package advisory (CVE-2026-62909)

Affected packages:

Microsoft.NETCore.App.Runtime.linux-arm >= 10.0.0, <= 10.0.10

Microsoft.NETCore.App.Runtime.linux-arm64 >= 10.0.0, <= 10.0.10

Microsoft.NETCore.App.Runtime.linux-musl-arm >= 10.0.0, <= 10.0.10

Microsoft.NETCore.App.Runtime.linux-musl-arm64 >= 10.0.0, <= 10.0.10

Microsoft.NETCore.App.Runtime.linux-musl-x64 >= 10.0.0, <= 10.0.10

Microsoft.NETCore.App.Runtime.linux-x64 >= 10.0.0, <= 10.0.10

Microsoft.NETCore.App.Runtime.osx-arm64 >= 10.0.0, <= 10.0.10

Microsoft.NETCore.App.Runtime.osx-x64 >= 10.0.0, <= 10.0.10

Microsoft.NETCore.App.Runtime.linux-arm >= 9.0.0, <= 9.0.18

Microsoft.NETCore.App.Runtime.linux-arm64 >= 9.0.0, <= 9.0.18

Microsoft.NETCore.App.Runtime.linux-musl-arm >= 9.0.0, <= 9.0.18

Microsoft.NETCore.App.Runtime.linux-musl-arm64 >= 9.0.0, <= 9.0.18

Microsoft.NETCore.App.Runtime.linux-musl-x64 >= 9.0.0, <= 9.0.18

Microsoft.NETCore.App.Runtime.linux-x64 >= 9.0.0, <= 9.0.18

Microsoft.NETCore.App.Runtime.osx-arm64 >= 9.0.0, <= 9.0.18

Microsoft.NETCore.App.Runtime.osx-x64 >= 9.0.0, <= 9.0.18

Microsoft.NETCore.App.Runtime.linux-arm >= 8.0.0, <= 8.0.29

Microsoft.NETCore.App.Runtime.linux-arm64 >= 8.0.0, <= 8.0.29

Microsoft.NETCore.App.Runtime.linux-musl-arm >= 8.0.0, <= 8.0.29

Microsoft.NETCore.App.Runtime.linux-musl-arm64 >= 8.0.0, <= 8.0.29

Microsoft.NETCore.App.Runtime.linux-musl-x64 >= 8.0.0, <= 8.0.29

Microsoft.NETCore.App.Runtime.linux-x64 >= 8.0.0, <= 8.0.29

Microsoft.NETCore.App.Runtime.osx-arm64 >= 8.0.0, <= 8.0.29

Microsoft.NETCore.App.Runtime.osx-x64 >= 8.0.0, <= 8.0.29

Patched in:

Microsoft.NETCore.App.Runtime.linux-arm 10.0.11

Microsoft.NETCore.App.Runtime.linux-arm64 10.0.11

Microsoft.NETCore.App.Runtime.linux-musl-arm 10.0.11

Microsoft.NETCore.App.Runtime.linux-musl-arm64 10.0.11

Microsoft.NETCore.App.Runtime.linux-musl-x64 10.0.11

Microsoft.NETCore.App.Runtime.linux-x64 10.0.11

Microsoft.NETCore.App.Runtime.osx-arm64 10.0.11

Microsoft.NETCore.App.Runtime.osx-x64 10.0.11

Microsoft.NETCore.App.Runtime.linux-arm 9.0.19

Microsoft.NETCore.App.Runtime.linux-arm64 9.0.19

Microsoft.NETCore.App.Runtime.linux-musl-arm 9.0.19

Microsoft.NETCore.App.Runtime.linux-musl-arm64 9.0.19

Microsoft.NETCore.App.Runtime.linux-musl-x64 9.0.19

Microsoft.NETCore.App.Runtime.linux-x64 9.0.19

Microsoft.NETCore.App.Runtime.osx-arm64 9.0.19

Microsoft.NETCore.App.Runtime.osx-x64 9.0.19

Microsoft.NETCore.App.Runtime.linux-arm 8.0.30

Microsoft.NETCore.App.Runtime.linux-arm64 8.0.30

Microsoft.NETCore.App.Runtime.linux-musl-arm 8.0.30

Microsoft.NETCore.App.Runtime.linux-musl-arm64 8.0.30

Microsoft.NETCore.App.Runtime.linux-musl-x64 8.0.30

Microsoft.NETCore.App.Runtime.linux-x64 8.0.30

Microsoft.NETCore.App.Runtime.osx-arm64 8.0.30

Microsoft.NETCore.App.Runtime.osx-x64 8.0.30

Change history

Field changes observed since this record was first indexed.

Sep 9, 2026CVSS 6.7 → 7.8

Sep 9, 2026Severity medium → high

Sep 9, 2026CVSS 7.8 → 6.7

Sep 9, 2026Severity high → medium

Sep 9, 2026CVSS 6.7 → 7.8

Sep 9, 2026Severity medium → high

Sep 9, 2026CVSS 7.8 → 6.7

Sep 9, 2026Severity high → medium

Sep 9, 2026CVSS 6.7 → 7.8

Sep 9, 2026Severity medium → high

Sep 8, 2026CVSS 7.8 → 6.7

Sep 8, 2026Severity high → medium