[CVE-2026-50650] Improper control of generation of code ('code injection') in .NET Framework allows an unauthorized a…

Descripción técnica

Improper control of generation of code ('code injection') in .NET Framework allows an unauthorized attacker to elevate privileges locally.

Puntuación CVSS

Score: 7.8/10 — Severidad: HIGH — Estado NIST: Analyzed

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Productos afectados

.net framework, Windows 10 1607, Windows server 2012, Windows server 2016, Windows 10 21h2 — Microsoft

Debilidades (CWE)

CWE-94

Fuente oficial

Publicado en NIST NVD.