What is CVE-2026-96957?

CVE-2026-96957 is a security advisory published by Microsoft Security Response Center (MSRC) with High severity. .NET Security Feature Bypass Vulnerability

Which CVE IDs does CVE-2026-96957 cover?

CVE-2026-96957 covers the following CVE IDs: CVE-2026-96957. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of CVE-2026-96957?

CVE-2026-96957 has a CVSS v3 base score of 8.8, published by Microsoft Security Response Center (MSRC).

Which products are affected by CVE-2026-96957?

CVE-2026-96957 affects 8 products, including: .NET 10.0 installed on Linux; .NET 10.0 installed on Mac OS; .NET 10.0 installed on Windows; .NET 11.0 installed on Linux; .NET 11.0 installed on Mac OS; and others — see the full list on the advisory page.

CVE-2026-96957HighCVSS 8.8

.NET Security Feature Bypass Vulnerability

Vendor

Microsoft Security Response Center (MSRC)

Published

October 13, 2026

Last Modified

—

🔗 CVE IDs covered (1)

CVE-2026-96957 →

📋 Description

Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.

🎯 Affected products8

.NET 10.0 installed on Linux
.NET 10.0 installed on Mac OS
.NET 10.0 installed on Windows
.NET 11.0 installed on Linux
.NET 11.0 installed on Mac OS
.NET 11.0 installed on Windows
Microsoft Visual Studio 2022 version 17.14
Microsoft Visual Studio 2026 version 18.10

✅ Remediation

KB5130036 (Security Update) — fixed build 10.0.402 KBRelease Notes (Security Update) — fixed build 11.0.100-rc.2 KBRelease Notes (Security Update) — fixed build 18.10.4 KBRelease Notes (Security Update) — fixed build 17.14.42

🔗 References (4)

advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96957
patchhttps://dotnet.microsoft.com/download/dotnet/10.0
referencehttps://support.microsoft.com/help/5130036
patchhttps://dotnet.microsoft.com/download/dotnet/11.0