{"id":"EUVD-2026-100207","enisaUuid":"53a359e1-8412-3462-b857-cd67bdcfa853","description":"Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.","datePublished":"Oct 13, 2026, 7:01:16 PM","dateUpdated":"Oct 31, 2026, 6:11:06 PM","baseScore":5.3,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","references":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96234\n","aliases":"CVE-2026-96234\nGHSA-fq6x-pvr9-888r\n","assigner":"microsoft","epss":0.33,"enisaIdProduct":[{"id":"0c2bdc9d-5e1d-30cb-b630-056b2f73f4b5","product":{"name":".NET 9.0 runtime","vendor":{"name":"Microsoft"}},"product_version":"9.0.0 \u003c9.0.21"},{"id":"11134ae4-187c-33fb-8085-70e098e9cb7e","product":{"name":"Microsoft Visual Studio 2022 version 17.14","vendor":{"name":"Microsoft"}},"product_version":"17.14.0 \u003c17.14.42"},{"id":"243de5a2-d0ab-3206-b81f-b3e982a2d74c","product":{"name":".NET 8.0 runtime","vendor":{"name":"Microsoft"}},"product_version":"8.0.0 \u003c8.0.32"},{"id":"4635944b-7b66-32a9-aa83-bd11d483c573","product":{"name":".NET 11.0 runtime","vendor":{"name":"Microsoft"}},"product_version":"11.0.0 \u003c11.0.0-rc.2"},{"id":"619ad1e0-d890-3ebf-8893-06e3abc02073","product":{"name":".NET 10.0 runtime","vendor":{"name":"Microsoft"}},"product_version":"10.0.0 \u003c10.0.13"},{"id":"8cf03d79-bcec-3575-aeb7-1d9f08b8429f","product":{"name":"Microsoft Visual Studio 2026 version 18.10","vendor":{"name":"Microsoft"}},"product_version":"18.10.0 \u003c18.10.4"}],"enisaIdVendor":[{"id":"17269c8b-c7ad-36fb-9888-c70d84d31fae","vendor":{"name":"Microsoft"}}],"enisaIdVulnerability":[{"id":"2eb80171-085b-36f2-a394-d52a78f5c2d3","vulnerability":{"id":"GHSA-fq6x-pvr9-888r","description":"Microsoft Security Advisory CVE-2026-96234 - .NET and Visual Studio Information Disclosure Vulnerability","datePublished":"Oct 13, 2026, 8:46:53 PM","dateUpdated":"Oct 19, 2026, 7:18:40 PM","baseScore":0.0,"references":"https://github.com/dotnet/wpf/security/advisories/GHSA-fq6x-pvr9-888r\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-96234\nhttps://github.com/dotnet/announcements/issues/482\nhttps://github.com/dotnet/wpf/issues/12025\nhttps://github.com/dotnet/wpf\nhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96234\n","enisa_id":"EUVD-2026-100207\n","aliases":"GHSA-fq6x-pvr9-888r\nCVE-2026-96234\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 2:07:48 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"598aef12-f92a-36b8-8417-532fabf493c4","vulnerability":{"id":"CVE-2026-96234","description":"Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.","datePublished":"Oct 13, 2026, 7:01:16 PM","dateUpdated":"Oct 31, 2026, 6:11:06 PM","status":"PUBLISHED","baseScore":5.3,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","references":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96234\n","enisa_id":"EUVD-2026-100207\n","assigner":"microsoft","epss":0.33,"dataProcessed":"Nov 7, 2026, 7:24:31 AM","vulnerabilityProduct":[{"id":"03bb3b3c-7f0e-3122-afea-599d6051e1ba","product":{"name":".NET 8.0 runtime","vendor":{"name":"Microsoft"}},"product_version":"8.0.0 \u003c8.0.32"},{"id":"30c29159-d6d2-3045-8f1c-232e889e39bb","product":{"name":".NET 11.0 runtime","vendor":{"name":"Microsoft"}},"product_version":"11.0.0 \u003c11.0.0-rc.2"},{"id":"81b8b19d-a80b-3387-90f0-6bfe0ce11f72","product":{"name":"Microsoft Visual Studio 2022 version 17.14","vendor":{"name":"Microsoft"}},"product_version":"17.14.0 \u003c17.14.42"},{"id":"8767f94c-b328-34ab-b024-044f0b3bb62c","product":{"name":".NET 10.0 runtime","vendor":{"name":"Microsoft"}},"product_version":"10.0.0 \u003c10.0.13"},{"id":"eba51080-3ac6-317a-a8ef-cc8b0c22d77c","product":{"name":"Microsoft Visual Studio 2026 version 18.10","vendor":{"name":"Microsoft"}},"product_version":"18.10.0 \u003c18.10.4"},{"id":"f8b1d527-2e65-3e20-bc9c-8b0aaf88936a","product":{"name":".NET 9.0 runtime","vendor":{"name":"Microsoft"}},"product_version":"9.0.0 \u003c9.0.21"}],"vulnerabilityVendor":[{"id":"3a1c986f-09f0-35cf-9b94-2f5c00d453cd","vendor":{"name":"Microsoft"}}]}}],"enisaIdAdvisory":[{"id":"0a85e04a-5e3d-335e-9da9-8b62f792244f","advisory":{"id":"WID-SEC-W-2026-3893","description":"Microsoft Entwicklerwerkzeuge: Mehrere Schwachstellen","summary":"Ein Angreifer kann mehrere Schwachstellen in Microsoft .NET Framework, Microsoft .NET, Microsoft ASP.NET, Microsoft Visual Studio 2022, Microsoft Visual Studio 2026, Microsoft Visual Studio Code, Microsoft SysInternals und Microsoft PowerShell ausnutzen, um seine Privilegien zu erhöhen, um Code auszuführen, um Informationen offenzulegen, um Sicherheitsmechanismen zu umgehen und um einen Denial of Service Zustand herbeizuführen.","datePublished":"Oct 13, 2026, 10:00:00 PM","dateUpdated":"Oct 28, 2026, 11:00:00 PM","baseScore":0.0,"references":"https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3893.json\nhttps://wid.cert-bund.de/portal/wid/securityadvisory?name\u003dWID-SEC-2026-3893\n","aliases":"CVE-2026-100205\nCVE-2026-102229\nCVE-2026-102231\nCVE-2026-102232\nCVE-2026-102233\nCVE-2026-102234\nCVE-2026-102235\nCVE-2026-102238\nCVE-2026-102851\nCVE-2026-102869\nCVE-2026-102870\nCVE-2026-103572\nCVE-2026-105016\nCVE-2026-105729\nCVE-2026-105732\nCVE-2026-108398\nCVE-2026-109468\nCVE-2026-58280\nCVE-2026-66822\nCVE-2026-69370\nCVE-2026-69651\nCVE-2026-70007\nCVE-2026-70035\nCVE-2026-70098\nCVE-2026-70159\nCVE-2026-70161\nCVE-2026-70162\nCVE-2026-70165\nCVE-2026-70174\nCVE-2026-70175\nCVE-2026-70179\nCVE-2026-70181\nCVE-2026-70183\nCVE-2026-70186\nCVE-2026-70188\nCVE-2026-70190\nCVE-2026-70194\nCVE-2026-70196\nCVE-2026-70197\nCVE-2026-83520\nCVE-2026-84008\nCVE-2026-85363\nCVE-2026-85790\nCVE-2026-87697\nCVE-2026-88092\nCVE-2026-92707\nCVE-2026-96222\nCVE-2026-96224\nCVE-2026-96225\nCVE-2026-96229\nCVE-2026-96230\nCVE-2026-96231\nCVE-2026-96232\nCVE-2026-96233\nCVE-2026-96234\nCVE-2026-96235\nCVE-2026-96236\nCVE-2026-96237\nCVE-2026-96238\nCVE-2026-96251\nCVE-2026-96303\nCVE-2026-96957\nCVE-2026-96958\nCVE-2026-96959\nCVE-2026-96960\nCVE-2026-97788\nCVE-2026-97801\n","source":{"id":8,"name":"csaf_certbund"},"advisoryProduct":[{"id":"0340e93b-e31d-31c8-9716-c4971e513544","product":{"name":"4.7","vendor":{"name":"Microsoft"}}},{"id":"03c9c371-3cb7-302c-a7c0-9c05938ff6e8","product":{"name":"SysInternals","vendor":{"name":"Microsoft"}}},{"id":"0ac83f74-b3dc-304d-ab10-d6963613cf12","product":{"name":"11","vendor":{"name":"Johnson Controls Inc"}}},{"id":"21a3f534-4ba8-3a00-9e47-8c0c83e6a34b","product":{"name":"Red Hat Enterprise Linux","vendor":{"name":"Red Hat"}}},{"id":"22f71178-78df-30dc-9023-f27809c7b39c","product":{"name":".NET","vendor":{"name":"Microsoft"}}},{"id":"23edd4a1-5a5b-30ec-9d5d-5c0981459269","product":{"name":"Microsoft Visual Studio Code","vendor":{"name":"Microsoft"}}},{"id":"2e108811-5978-3adb-9a0e-16130ec8031c","product":{"name":"4.8.1","vendor":{"name":"Microsoft"}}},{"id":"34ebc4d2-395d-3450-8e9c-31e56187cf1e","product":{"name":"4.8","vendor":{"name":"Microsoft"}}},{"id":"3b371dad-aaae-3522-bedd-a36f6148fd4b","product":{"name":"RESF Rocky Linux","vendor":{"name":"RESF"}}},{"id":"5a10e7cf-eae5-3db9-8d85-767701f65e2f","product":{"name":"Oracle Linux","vendor":{"name":"Oracle Corporation"}}},{"id":"6115b60c-ecd1-33b2-8204-57e664bb310d","product":{"name":"4.7.2","vendor":{"name":"Microsoft"}}},{"id":"6c421a13-fd00-3275-8347-a7f6d33b163c","product":{"name":"10","vendor":{"name":"Johnson Controls Inc"}}},{"id":"731dc4cd-be7e-3a40-ae24-619da672e2d4","product":{"name":"Ubuntu Linux","vendor":{"name":"Canonical"}}},{"id":"79081812-d806-390a-bb45-610d615d0c71","product":{"name":".NET Framework","vendor":{"name":"Microsoft"}}},{"id":"7935fc7e-63b8-32aa-8f72-d3be4bb14062","product":{"name":"Core 10.0","vendor":{"name":"Microsoft"}}},{"id":"7a37837c-55aa-3842-ac93-a89ed40d8b57","product":{"name":"7.6","vendor":{"name":"OpenBSD"}}},{"id":"8464fe56-2245-3772-bcb7-2ce4e0849161","product":{"name":"3.5","vendor":{"name":"Microsoft"}}},{"id":"8491a010-e09c-36f9-8793-3da2b347e064","product":{"name":"Fedora Linux","vendor":{"name":"Fedora"}}},{"id":"88a3eb7f-0a2d-3d83-ba6a-7fb565e04d3e","product":{"name":"4.7.1","vendor":{"name":"Microsoft"}}},{"id":"96663408-331d-3be4-9821-baee53eaed32","product":{"name":"Microsoft Visual Studio 2022","vendor":{"name":"Microsoft"}}},{"id":"9cc63617-e6d6-3dec-bcb1-cb3637c83420","product":{"name":"8","vendor":{"name":"National Oceanic and Atmospheric Administration (NOAA)"}}},{"id":"a42f41bd-00df-34ef-ad93-957fe0b905a1","product":{"name":"suite","vendor":{"name":"frappe"}}},{"id":"b0799acb-e04f-3a6a-a138-96edf96a610a","product":{"name":"ASP.NET","vendor":{"name":"Microsoft"}}},{"id":"b6b1e21b-3cb9-3ba5-a11a-65c4547cc661","product":{"name":"Core 11.0","vendor":{"name":"Microsoft"}}},{"id":"c6e73efc-ae5a-33ca-9dc4-02fd378cff3a","product":{"name":"9","vendor":{"name":"NetApp"}}},{"id":"ca1e0db2-25ac-3899-8644-de0c25421ef9","product":{"name":"Core 8.0","vendor":{"name":"Microsoft"}}},{"id":"d366f78c-999d-382e-a819-eb3900735d86","product":{"name":"4.6.2","vendor":{"name":"open source"}}},{"id":"d518e09f-0bc2-3ea6-9d84-daa73e056e38","product":{"name":"Core 9.0","vendor":{"name":"Microsoft"}}},{"id":"d877fca2-dac8-30aa-86b1-d9f69483c4b2","product":{"name":"7.4","vendor":{"name":"AVEVA Software, LLC"}}},{"id":"e1548bc1-8b2a-360e-8600-045722d0f2a3","product":{"name":"Microsoft Visual Studio 2026","vendor":{"name":"Microsoft"}}},{"id":"e28c6dd0-e838-3510-90e8-10b54febe4de","product":{"name":"7.5","vendor":{"name":"OpenBSD"}}},{"id":"e50e4638-bf31-3f9e-85be-5c76ef507287","product":{"name":"PowerShell","vendor":{"name":"Microsoft"}}},{"id":"f362c276-1be6-31ad-83fc-bceab2e1b52b","product":{"name":"Windows Process Monitor","vendor":{"name":"Microsoft"}}}]}},{"id":"f702350b-9e26-3421-8b18-371e4b7ae5b2","advisory":{"id":"NCSC-2026-0426","description":"Kwetsbaarheden verholpen in Microsoft Developer Tools","datePublished":"Oct 13, 2026, 6:56:15 PM","dateUpdated":"Oct 13, 2026, 6:56:15 PM","baseScore":0.0,"references":"","aliases":"CVE-2026-58280\nCVE-2026-66822\nCVE-2026-69370\nCVE-2026-69651\nCVE-2026-69905\nCVE-2026-69914\nCVE-2026-69945\nCVE-2026-69969\nCVE-2026-69979\nCVE-2026-70007\nCVE-2026-70035\nCVE-2026-70098\nCVE-2026-70159\nCVE-2026-70161\nCVE-2026-70165\nCVE-2026-70174\nCVE-2026-70175\nCVE-2026-70179\nCVE-2026-70181\nCVE-2026-70183\nCVE-2026-70186\nCVE-2026-70188\nCVE-2026-70190\nCVE-2026-70194\nCVE-2026-70196\nCVE-2026-70197\nCVE-2026-83520\nCVE-2026-84008\nCVE-2026-85363\nCVE-2026-85849\nCVE-2026-85934\nCVE-2026-87697\nCVE-2026-88092\nCVE-2026-96224\nCVE-2026-96225\nCVE-2026-96229\nCVE-2026-96230\nCVE-2026-96231\nCVE-2026-96232\nCVE-2026-96233\nCVE-2026-96234\nCVE-2026-96235\nCVE-2026-96236\nCVE-2026-96237\nCVE-2026-96238\nCVE-2026-96957\nCVE-2026-96958\nCVE-2026-96959\nCVE-2026-96960\nCVE-2026-102229\nCVE-2026-102230\nCVE-2026-102231\nCVE-2026-102232\nCVE-2026-102233\nCVE-2026-102234\nCVE-2026-102235\nCVE-2026-102238\nCVE-2026-102851\nCVE-2026-102870\nCVE-2026-103572\nCVE-2026-108398\nCVE-2026-102869\n","source":{"id":19,"name":"csaf_ncscnl"},"advisoryProduct":[{"id":"005531e7-2123-31f8-b438-0ba813a5e81e","product":{"name":"System.Security.Cryptography.Xml on .NET 10.0 installed on Linux","vendor":{"name":"Microsoft"}}},{"id":"0064ac93-4282-3977-a400-37c16aa6a97b","product":{"name":"System.Security.Cryptography.Xml on .NET 11.0 installed on Windows","vendor":{"name":"Microsoft"}}},{"id":"03ea5b1b-1b60-3840-a9b5-b119564f7f7f","product":{"name":"System.Security.Cryptography.Xml on .NET 9.0 installed on Windows","vendor":{"name":"Microsoft"}}},{"id":"0b776c4d-a402-3617-81ed-0c9fc9c90678","product":{"name":"Microsoft .NET Framework 3.5 AND 4.8.1 on Windows Server 2022","vendor":{"name":"Microsoft"}}},{"id":"0f4d67d3-0bb5-35e2-9358-8da72f1ac049","product":{"name":".NET 9.0 installed on Windows","vendor":{"name":"Microsoft"}}},{"id":"16744c33-1e0e-30d5-83cc-1ce422b8b4b2","product":{"name":".NET 8.0 installed on Windows","vendor":{"name":"Microsoft"}}},{"id":"20087512-bd98-31c6-838c-06cfab89bc07","product":{"name":"Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 version 26H2","vendor":{"name":"Microsoft"}}},{"id":"21cbb928-8e75-3f91-90e5-89c560908f91","product":{"name":"Microsoft .NET Framework 4.8","vendor":{"name":"Microsoft"}}},{"id":"2451a358-e942-3c01-b8cc-82c15519098c","product":{"name":"ASP.NET Core 9.0","vendor":{"name":"Microsoft"}}},{"id":"2466d6de-f2c6-3454-bd37-635747114577","product":{"name":"System.Security.Cryptography.Xml on .NET 10.0 installed on Mac OS","vendor":{"name":"Microsoft"}}},{"id":"2d5bf7cb-5f2e-3c43-b93b-16e777626121","product":{"name":"Microsoft .NET Framework 4.8.1 on Windows 11 version 26H1","vendor":{"name":"Microsoft"}}},{"id":"3295e98f-d765-3547-a371-7cd55f77d625","product":{"name":".NET 9.0 installed on Mac OS","vendor":{"name":"Microsoft"}}},{"id":"35ec7e26-eeac-37f8-80b0-3142e2cacf34","product":{"name":".NET 10.0 installed on Windows","vendor":{"name":"Microsoft"}}},{"id":"3cbba94e-9736-3ea4-993f-6e86ac393f21","product":{"name":".NET 10.0 installed on Mac OS","vendor":{"name":"Microsoft"}}},{"id":"42363be3-3d3a-3219-a3d1-090e931f62dc","product":{"name":"System.Security.Cryptography.Xml on .NET 11.0 installed on Linux","vendor":{"name":"Microsoft"}}},{"id":"49317421-eaa7-3d42-848f-74f38ee5986b","product":{"name":"System.Security.Cryptography.Xml on .NET 11.0 installed on Mac OS","vendor":{"name":"Microsoft"}}},{"id":"5149b6f8-9fee-37e3-8e94-0ec44f8306ca","product":{"name":"ASP.NET Core 11.0","vendor":{"name":"Microsoft"}}},{"id":"5d6dbd25-6880-34ba-9957-c5dae119e4e3","product":{"name":".NET 10.0 installed on Linux","vendor":{"name":"Microsoft"}}},{"id":"5fa73d10-c28d-34d0-bbfe-852b3983571f","product":{"name":"Azure API Center","vendor":{"name":"Microsoft"}}},{"id":"713375d6-e928-3196-9e12-597cd77d7db0","product":{"name":".NET 11.0 installed on Windows","vendor":{"name":"Microsoft"}}},{"id":"83f100a2-b45e-332f-b841-41bbb7d9270d","product":{"name":"Visual Studio Code","vendor":{"name":"Microsoft"}}},{"id":"8bda8360-f51f-39f5-89f9-28c889b2dee2","product":{"name":"Microsoft Visual Studio 2022 version 17.14","vendor":{"name":"Microsoft"}}},{"id":"8c41968a-941c-363d-9374-b739aa5d1ae8","product":{"name":".NET 11.0 installed on Mac OS","vendor":{"name":"Microsoft"}}},{"id":"946a6307-d2fb-3d6f-ad7e-64e193953785","product":{"name":"Microsoft .NET Framework 3.5 AND 4.8.1 on Windows Server 2025","vendor":{"name":"Microsoft"}}},{"id":"9576dee6-996f-30f0-a420-3279296dfba9","product":{"name":"System.Security.Cryptography.Xml on .NET 9.0 installed on Linux","vendor":{"name":"Microsoft"}}},{"id":"b1347ad5-2716-3bd7-b3a1-5116466c3e09","product":{"name":"Microsoft.AspNetCore.Components.WebAssembly.Server on .NET 8.0 installed on Linux","vendor":{"name":"Microsoft"}}},{"id":"c6d33072-e0b4-3313-86c7-5592aec47a75","product":{"name":"ASP.NET Core 8.0","vendor":{"name":"Microsoft"}}},{"id":"d2effc40-e76e-3912-98e8-52a1b0a65068","product":{"name":".NET 9.0 installed on Linux","vendor":{"name":"Microsoft"}}},{"id":"db89200d-4073-300d-90b7-e34369b4f031","product":{"name":"Microsoft.AspNetCore.Components.WebAssembly.Server on .NET 8.0 installed on Mac OS","vendor":{"name":"Microsoft"}}},{"id":"dc78e00e-40f0-3be3-8b60-867bdc135981","product":{"name":"System.Security.Cryptography.Xml on .NET 9.0 installed on Mac OS","vendor":{"name":"Microsoft"}}},{"id":"e0fbdf1b-c4cf-3dbb-8952-e6ad0fa296fa","product":{"name":"Microsoft.AspNetCore.Components.WebAssembly.Server on .NET 8.0 installed on Windows","vendor":{"name":"Microsoft"}}},{"id":"e927c0a4-8f0f-3cb1-82df-bf3aab3ab8f9","product":{"name":".NET 8.0 installed on Mac OS","vendor":{"name":"Microsoft"}}},{"id":"f00dc48f-8233-3a16-8469-b9edf1fd6b11","product":{"name":"System.Security.Cryptography.Xml on .NET 10.0 installed on Windows","vendor":{"name":"Microsoft"}}},{"id":"fd0603de-fa09-36c2-99a7-22c211b76d80","product":{"name":".NET 11.0 installed on Linux","vendor":{"name":"Microsoft"}}},{"id":"fdb51051-4897-37a6-90b5-7a20e41bd5c3","product":{"name":".NET 8.0 installed on Linux","vendor":{"name":"Microsoft"}}},{"id":"fff151d4-9dc9-3021-b9d4-a8a4ffe89352","product":{"name":"ASP.NET Core 10.0","vendor":{"name":"Microsoft"}}}]}}]}