CVE-2026-35433HighCVSS 7.3

.NET Elevation of Privilege Vulnerability

Published
May 22, 2026
Last Modified
—

🔗 CVE IDs covered (1)

CVE-2026-35433 →

📋 Description

Improper input validation in .NET allows an unauthorized attacker to elevate privileges locally.

🎯 Affected products30

  • .NET 10.0 installed on Windows
  • .NET 8.0 installed on Windows
  • .NET 9.0 installed on Windows
  • Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for ARM64-based Systems
  • Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for x64-based Systems
  • Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for ARM64-based Systems
  • Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for x64-based Systems
  • Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 21H2 for ARM64-based Systems
  • Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 21H2 for x64-based Systems
  • Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 22H2 for ARM64-based Systems
  • Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 22H2 for x64-based Systems
  • Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2022
  • Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 Version 21H2 for ARM64-based Systems
  • Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 Version 21H2 for x64-based Systems
  • Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 23H2 for ARM64-based Systems
  • Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 23H2 for x64-based Systems
  • Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 24H2 for ARM64-based Systems
  • Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 24H2 for x64-based Systems
  • Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 25H2 for ARM64-based Systems
  • Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 25H2 for x64-based Systems
  • Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 26H1 for ARM64-based Systems
  • Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 version 26H1 for x64-based Systems
  • Microsoft .NET Framework 3.5 AND 4.8.1 on Windows Server 2022
  • Microsoft .NET Framework 3.5 AND 4.8.1 on Windows Server 2025
  • Microsoft .NET Framework 3.5 on Windows Server 2012
  • Microsoft .NET Framework 3.5 on Windows Server 2012 R2
  • Microsoft .NET Framework 4.8 on Windows 10 Version 1607 for x64-based Systems
  • Microsoft .NET Framework 4.8 on Windows Server 2012
  • Microsoft .NET Framework 4.8 on Windows Server 2012 R2
  • Microsoft .NET Framework 4.8 on Windows Server 2016

✅ Remediation

KB5093446 (Security Update) — fixed build 10.0.8 KB5093447 (Security Update) — fixed build 8.0.27 KB5093448 (Security Update) — fixed build 9.0.16 KB5087065 (Security Update) — fixed build 4.8.9334.0 and 4.8.4802.0 KB5087067 (Security Update) — fixed build 4.8.9334.0 and 4.8.4802.0 KB5087063 (Security Update) — fixed build 4.8.9334.0 and 4.8.4802.0 KB5087066 (Security Update) — fixed build 4.8.9334.0 and 4.8.4802.0 KB5087068 (Security Update) — fixed build 4.8.9334.0 and 4.8.4802.0 KB5087064 (Security Update) — fixed build 4.8.9334.0 and 4.8.4802.0 KB5087061 (Security Update) — fixed build 4.8.9334.0 and 4.8.4802.0 KB5087059 (Security Update) — fixed build 4.8.9334.0 and 4.8.4802.0 KB5087053 (Security Update) — fixed build 4.8.9334.0 and 4.8.4802.0 KB5087051 (Security Update) — fixed build 4.8.9334.0 and 4.8.4802.0 KB5087055 (Security Update) — fixed build 4.8.9334.0 and 4.8.4802.0 KB5087058 (Security Update) — fixed build 4.8.9334.0 and 4.8.4802.0 KB5087054 (Security Update) — fixed build 4.8.9334.0 and 4.8.4802.0 KB5087048 (Security Update) — fixed build 4.8.9334.0 and 4.8.4802.0 KB5087049 (Security Update) — fixed build 4.8.9334.0 and 4.8.4802.0

🔗 References (37)