CVE-2026-102869: microsoft microsoft .net framework 3.5 and 4.6.2/4.7/4.7.1/4.7.2 Type Confusion

Vulnerability summary

CVE-2026-102869 is a high (CVSS 8.8) Type Confusion vulnerability in microsoft microsoft .net framework 3.5 and 4.6.2/4.7/4.7.1/4.7.2. EPSS estimates a 0.74% chance of exploitation in the next 30 days, higher than 53.7% of scored vulnerabilities.

Timeline

1. 13-10-2026
   PublishedVulnerability first disclosed.
2. 19-10-2026
   Last modifiedVulnerability information updated.

Description

Access of resource using incompatible type ('type confusion') in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network.

• CWE-843Access of Resource Using Incompatible Type ('Type Confusion')The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.