.NET and Visual Studio Elevation of Privilege Vulnerability
Access of resource using incompatible type ('type confusion') in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2
Vendor
Microsoft
Product
Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2
Platforms
Windows 10 version 1607
Windows Server 2016
Windows Server 2019
Default status
Unknown
Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
3.0.0.0
affected
custom
2.0.50727.8987 AND 3.0.30729.8982 AND 4.7.4150.0
Unavailable
None listed
Microsoft .NET Framework 3.5 AND 4.7.2
Vendor
Microsoft
Product
Microsoft .NET Framework 3.5 AND 4.7.2
Platforms
Windows 10 version 1809
Default status
Unknown
Microsoft .NET Framework 3.5 AND 4.7.2 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
4.7.0
affected
custom
2.0.50727.9073 AND 3.0.30729.9070 AND 4.7.4150.0
Unavailable
None listed
Microsoft .NET Framework 3.5 AND 4.8
Vendor
Microsoft
Product
Microsoft .NET Framework 3.5 AND 4.8
Platforms
Windows 10 version 1809
Windows 10 version 21H2
Windows 10 version 22H2
Windows Server 2019
Windows Server 2022
Default status
Unknown
Microsoft .NET Framework 3.5 AND 4.8 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
4.8.0
affected
custom
2.0.50727.9073 AND 3.0.30729.9070 AND 4.8.4811.0
Unavailable
None listed
Microsoft .NET Framework 3.5 AND 4.8.1
Vendor
Microsoft
Product
Microsoft .NET Framework 3.5 AND 4.8.1
Platforms
Windows 10 version 21H2
Windows 10 version 22H2
Windows 11 version 23H2
Windows 11 version 24H2
Windows 11 version 25H2
Windows 11 version 26H2
Windows Server 2022
Windows Server 2025
Default status
Unknown
Microsoft .NET Framework 3.5 AND 4.8.1 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
4.8.1
affected
custom
2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0
Unavailable
None listed
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2
Vendor
Microsoft
Product
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2
Platforms
Windows Server 2012
Windows Server 2012 R2
Default status
Unknown
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
4.7.0
affected
custom
4.7.4150.0
Unavailable
None listed
Microsoft .NET Framework 4.8
Vendor
Microsoft
Product
Microsoft .NET Framework 4.8
Platforms
Windows 10 version 1607
Windows Server 2012
Windows Server 2012 R2
Windows Server 2016
Default status
Unknown
Microsoft .NET Framework 4.8 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
4.8.0
affected
custom
4.8.4811.0
Unavailable
None listed
Microsoft .NET Framework 4.8.1
Vendor
Microsoft
Product
Microsoft .NET Framework 4.8.1
Platforms
Windows 11 version 26H1
Default status
Unknown
Microsoft .NET Framework 4.8.1 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
4.8.0.0
affected
custom
4.8.9363.0
Unavailable
None listed
Microsoft Visual Studio 2022 version 17.14
Vendor
Microsoft
Product
Microsoft Visual Studio 2022 version 17.14
Platforms
Unknown
Default status
Unknown
Microsoft Visual Studio 2022 version 17.14 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
17.14.0
affected
custom
17.14.42
Unavailable
None listed
Microsoft Visual Studio 2026 version 18.10
Vendor
Microsoft
Product
Microsoft Visual Studio 2026 version 18.10
Platforms
Unknown
Default status
Unknown
Microsoft Visual Studio 2026 version 18.10 · Scoped product and version facts