Analysis and contextual insights are available on OpenCVE Cloud.
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
| Source | ID | Title |
|---|---|---|
Github GHSA |
GHSA-8x9c-mqxv-q2pp | Microsoft Security Advisory CVE-2026-35433 – .NET Elevation of Privilege Vulnerability |
Thu, 18 Jun 2026 04:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally. | Improper input validation in .NET allows an unauthorized attacker to elevate privileges locally. |
Tue, 09 Jun 2026 18:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Improper input validation in .NET allows an unauthorized attacker to elevate privileges locally. | Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally. |
Fri, 05 Jun 2026 17:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally. | Improper input validation in .NET allows an unauthorized attacker to elevate privileges locally. |
Mon, 01 Jun 2026 19:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Improper input validation in .NET allows an unauthorized attacker to elevate privileges locally. | Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally. |
Thu, 28 May 2026 00:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| References |
| |
| Metrics |
threat_severity
|
threat_severity
|
Wed, 13 May 2026 15:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Tue, 12 May 2026 17:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Improper input validation in .NET allows an unauthorized attacker to elevate privileges locally. | |
| Title | .NET Elevation of Privilege Vulnerability | |
| First Time appeared |
Microsoft
Microsoft .net |
|
| Weaknesses | CWE-190 CWE-20 |
|
| CPEs | cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:* | |
| Vendors & Products |
Microsoft
Microsoft .net |
|
| References |
| |
| Metrics |
cvssV3_1
|
Status: PUBLISHED
Assigner: microsoft
Published:
Updated: 2026-06-19T16:13:23.315Z
Reserved: 2026-04-02T19:21:11.804Z
Link: CVE-2026-35433
Updated: 2026-05-13T10:01:42.300Z
Status : Undergoing Analysis
Published: 2026-05-12T18:17:13.710
Modified: 2026-06-17T20:16:55.200
Link: CVE-2026-35433
OpenCVE Enrichment
Updated: 2026-06-18T21:15:03Z
Github GHSA