← Back to search

CVE-2026-96224

8.8 HIGH

Published 2026-10-13 · Updated 2026-10-14

AI risk analysis

Summary
A .NET out-of-bounds write vulnerability allows remote attackers to execute arbitrary code on affected systems. This is particularly concerning because it can be exploited over the network without authentication, making it highly impactful for exposed services.
Exploitability
Exploitation appears moderately difficult as it likely requires crafting a specific payload that triggers the out-of-bounds write condition, but the lack of public exploit references suggests it may require significant effort to develop a reliable exploit.
Blast radius
The impact could be severe across any .NET application or service exposed to untrusted network traffic, potentially leading to full system compromise and lateral movement within the network.
Detection
No reliable host or network indicator is derivable from the published description.
Prioritized remediation
No fixed version is published. Disable the affected .NET functionality or restrict access to the named endpoint until a patch is available.
rcedotnetnetwork

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses

CWE-787

All references

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

Related by shared AI tags and CWE weakness class. Browse the full archive.