CVE-2026-96235

Summary

A .NET out-of-bounds write vulnerability allows remote attackers to execute arbitrary code on affected systems. This flaw occurs when the application processes untrusted input without proper bounds checking, potentially leading to complete system compromise.

Exploitability

Exploitation is moderately difficult requiring a network-based attack with specific input conditions, but can be achieved without authentication through crafted input processing.

Blast radius

The vulnerability could impact any .NET application running on affected systems, potentially allowing attackers to gain full control over the affected server or application environment.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to .NET Framework 4.8.1 or later, or .NET Core 3.1.32 or later, as these versions contain the necessary patches for this vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.