CVE-2026-96222: microsoft microsoft .net framework 3.5 Improper Certificate Validation
CVSS: 7.4v3.1HighAwaiting analysis
AliasesGHSA-vrv5-2jg9-4mmrCGA-2r3q-jx58-82cpCGA-38rj-4vhp-354gCGA-588q-7wr7-3rjjCGA-5x64-h3qg-3crgCGA-68mw-2vrr-mjxqCGA-6f5j-3xfv-7mjgCGA-6mjh-v9pw-jxx7CGA-8fcj-3344-qj24CGA-98gx-jghp-vh5mCGA-c6qx-qxw3-9mq3CGA-j7jj-72fx-frq4CGA-rpjq-59qh-gxc4CGA-xphq-37gm-958mCGA-662g-346g-mcxrCGA-692w-3xwr-q765CGA-7fhm-6m2g-cr65CGA-cf4g-wr9w-63ffCGA-hh3c-98jm-m3h5CGA-mjfq-w2c7-f2m8CGA-mrv3-g5c5-5cv8CGA-p95g-4fhw-w33hCGA-prff-g2jw-86m3CGA-vwww-ghjh-6663CGA-w7w3-85r5-3m9wCGA-24mv-3769-p77jCGA-rcx3-2783-x9fjCGA-x22j-vhhf-3h2qCGA-x3mw-2hf4-px9j
Published 13-10-2026Last modified 16-10-2026
Vulnerability summary
CVE-2026-96222 is a high (CVSS 7.4) Improper Certificate Validation vulnerability in microsoft microsoft .net framework 3.5. EPSS estimates a 0.58% chance of exploitation in the next 30 days, higher than 46.8% of scored vulnerabilities.
CVSS score
7.4/10
010
High · v3.1 (CVE.org)EPSS score
0.58%
0%100%
Low · Change unavailableKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Timeline
- 13-10-2026PublishedVulnerability first disclosed.
- 16-10-2026Last modifiedVulnerability information updated.
Description
Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.
CVSS metrics
5 scores · 5 sources · 1 versionHigh 7.4Preferred score · CVE.org (CNA)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:CSourcesAll 5 agree
- NVDNIST7.4HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
- OSV · NugetEcosystem advisory · calculated7.4HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
- OSV · WolfiEcosystem advisory · calculated7.4HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
- OSV · ChainguardEcosystem advisory · calculated7.4HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
EPSS trend
Probability
0.58%
Chance of exploitation in the next 30 days
Percentile
47%
Versus all other CVEs
30-day change
Change unavailable
Change unavailable
14-10-202619-10-2026
EPSS score0.58%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Microsoft22 products
- microsoft .net framework 3.5≥ 3.5.0, < 2.0.50727.9188 AND 3.0.30729.9171
- microsoft .net framework 3.5 and 4.6.2/4.7/4.7.1/4.7.2≥ 3.0.0.0, < 2.0.50727.8987 AND 3.0.30729.8982 AND 4.7.4150.0
- microsoft .net framework 3.5 and 4.7.2≥ 4.7.0, < 2.0.50727.9073 AND 3.0.30729.9070 AND 4.7.4150.0
- microsoft .net framework 3.5 and 4.8≥ 4.8.0, < 2.0.50727.9073 AND 3.0.30729.9070 AND 4.8.4811.0
- microsoft .net framework 3.5 and 4.8.1≥ 4.8.1, < 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0
Chainguard2 products
- dotnet-8-sdkAll versions (No fix recorded) | < 8.0.132-r0
- dotnet-bootstrap-8All versions (No fix recorded)
Wolfi2 products
- dotnet-8-sdkAll versions (No fix recorded) | < 8.0.132-r0
- dotnet-bootstrap-8All versions (No fix recorded)
NuGet1 product
- System.Security.Cryptography.Xml≥ 8.0.0, < 8.0.5
4 vendors · 27 products
References
5 links
- github.com/dotnet/runtimePACKAGE