Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
7468 articles · 235625 vulns · 36/41 feeds (7d)
← Back to list
8.8
CVE-2026-108398PATCHED
microsoft · microsoft .net framework 3.5 and 4.6.2/4.7/4.7.1/4.7.2

.NET Framework Security Feature Bypass Vulnerability

Description

Untrusted search path in .NET Framework allows an authorized attacker to bypass a security feature locally.

Affected Products

VendorProductVersions
microsoftmicrosoft .net framework 3.5 and 4.6.2/4.7/4.7.1/4.7.23.0.0.0, 4.7.0, 4.8.0, 4.8.1, 4.7.0, 4.8.0, 4.8.0.0

Also Affects

Downstream vendors/products affected by this vulnerability

VendorProductSourceConfidence
microsoftsysinternalscert_advisory90%
microsoftasp.netcert_advisory90%
microsoftpowershellcert_advisory90%
microsoftmicrosoft visual studiocert_advisory90%
microsoft.netcert_advisory90%

References

  • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108398(vendor-advisory, patch)

Related News (9 articles)

Tier D
Infosecurity Magazine18h ago
Microsoft Breaks Patch Tuesday Record Again with 1400+ CVEs
→ No new info (linked only)
Tier B
BSI Advisories19h ago
[NEU] [hoch] Microsoft Entwicklerwerkzeuge: Mehrere Schwachstellen
→ No new info (linked only)
Tier D
SecurityWeek19h ago
Microsoft Patches Record 1,413 Vulnerabilities, Including Exploited Windows Zero-Day
→ No new info (linked only)
Tier D
The Hacker News22h ago
Microsoft Patches Record 1,413 Flaws, Including Exploited Windows Shell Bug
→ No new info (linked only)
Tier B
CERT-FR1d ago
Multiples vulnérabilités dans Microsoft .Net (14 octobre 2026)
→ No new info (linked only)
Tier C
Krebs on Security1d ago
Microsoft Patches More Than 1,400 Security Flaws
→ No new info (linked only)
Tier C
VulDB1d ago
CVE-2026-108398 | Microsoft .NET Framework untrusted search path
→ No new info (linked only)
Tier A
Microsoft MSRC1d ago
CVE-2026-108398 .NET Framework Security Feature Bypass Vulnerability
→ No new info (linked only)
Tier C
CrowdStrike Blog1d ago
October 2026 Patch Tuesday: 1,413 CVEs Include Three Zero-Days and 75 Critical Vulnerabilities
→ No new info (linked only)

Discussion (0)

Loading…

CVSS 3.18.8 HIGH
VectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C
CISA KEV❌ No
Actively exploited❌ No
Patch available
2.0.50727.8987 AND 3.0.30729.8982 AND 4.7.4150.02.0.50727.9073 AND 3.0.30729.9070 AND 4.7.4150.02.0.50727.9073 AND 3.0.30729.9070 AND 4.8.4811.02.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.04.7.4150.04.8.4811.04.8.9363.0
CWECWE-426
PublishedOct 13, 2026
Trending Score64
Source articles9
Independent9
Info Completeness0/14
Missing: cve_id, title, description, vendor, product, versions, cvss, epss, cwe, kev, exploit, patch, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

HIGHCVE-2026-96951EXPKEV
Windows Shell Security Feature Bypass Vulnerability
Trending: 132
HIGHCVE-2026-81963EXPKEV
Windows Update Stack Elevation of Privilege Vulnerability
Trending: 69
HIGHCVE-2026-85880EXPKEV
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
Trending: 69
CRITICALCVE-2026-100202
Windows Message Queuing Queue Manager Remote Code Execution Vulnerability
Trending: 66
CRITICALCVE-2026-70242
Microsoft Office Outlook Remote Code Execution Vulnerability
Trending: 64

Pin to Dashboard

Verification

State: unverified
Confidence: 0%

Vulnerability Timeline

CVE Published
Oct 13, 2026
Discovered by ZDM
Oct 13, 2026
Patch Available
Oct 14, 2026