| CVE Number | Vulnerability | Product | Severity | Date |
|---|---|---|---|---|
| CVE-2026-108398 | .NET Framework Security Feature Bypass Vulnerability | Windows 10, Windows 11, Windows Server | Important | 03-11-2026 |
Technical Information
An authenticated attacker with low-level access could exploit an untrusted search path vulnerability to bypass Windows Defender Application Control (WDAC) enforcement by registering a specially crafted .NET assembly for loading by a protected process, enabling unauthorized code execution without requiring user interaction.
Patch release date: Oct 13, 2026
Further information on this vulnerability is available at : CVE-2026-108398
Affected Software
Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows 10 version 1607,Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2016,
Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2019,
Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 version 1809,
Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 version 1809,
Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 version 21H2,
Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 version 22H2,
Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2019,
Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2022,
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012,
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 R2,
Microsoft .NET Framework 4.8 on Windows 10 version 1607,
Microsoft .NET Framework 4.8 on Windows Server 2012,
Microsoft .NET Framework 4.8 on Windows Server 2012 R2,
Microsoft .NET Framework 4.8 on Windows Server 2016,
Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 version 21H2,
Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 version 22H2,
Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 version 24H2,
Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 version 25H2,
Microsoft .NET Framework 3.5 AND 4.8.1 on Windows Server 2025,
Microsoft .NET Framework 4.8.1 on Windows 11 version 26H1,
Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 version 23H2,
Microsoft .NET Framework 3.5 AND 4.8.1 on Windows Server 2022,
Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 version 26H2