{"id":"EUVD-2026-99702","enisaUuid":"a1a25446-548f-3c09-a402-4690eb3f28df","description":"Improper certificate validation in .NET Framework allows an unauthorized attacker to bypass a security feature over a network.","datePublished":"Oct 13, 2026, 7:00:26 PM","dateUpdated":"Oct 31, 2026, 6:06:21 PM","baseScore":6.5,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C","references":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70194\n","aliases":"CVE-2026-70194\nGHSA-fqpq-cx42-9jmm\n","assigner":"microsoft","epss":0.49,"enisaIdProduct":[{"id":"3caeae42-1b32-3548-84a8-e5f5d3aabb43","product":{"name":"Microsoft Visual Studio 2026 version 18.10","vendor":{"name":"Microsoft"}},"product_version":"18.10.0 \u003c18.10.4"},{"id":"63e10c5d-e6ff-3e9b-bc86-107964718593","product":{"name":".NET 11.0 runtime","vendor":{"name":"Microsoft"}},"product_version":"11.0.0 \u003c11.0.0-rc.2"},{"id":"7ece702e-0091-36c9-ad60-689052618164","product":{"name":"Microsoft Visual Studio 2022 version 17.14","vendor":{"name":"Microsoft"}},"product_version":"17.14.0 \u003c17.14.42"}],"enisaIdVendor":[{"id":"973b2e7f-b116-30df-a741-fc476f36ec06","vendor":{"name":"Microsoft"}}],"enisaIdVulnerability":[{"id":"b4127a53-a588-37c0-8156-32cf7584bacf","vulnerability":{"id":"GHSA-fqpq-cx42-9jmm","description":"Microsoft Security Advisory CVE-2026-70194 - .NET and Visual Studio Security Feature Bypass Vulnerability","datePublished":"Oct 13, 2026, 8:00:42 PM","dateUpdated":"Oct 19, 2026, 4:15:37 PM","baseScore":0.0,"references":"https://github.com/dotnet/runtime/security/advisories/GHSA-fqpq-cx42-9jmm\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-70194\nhttps://github.com/dotnet/announcements/issues/464\nhttps://github.com/dotnet/runtime/issues/135701\nhttps://github.com/dotnet/runtime\nhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70194\n","enisa_id":"EUVD-2026-99702\n","aliases":"GHSA-fqpq-cx42-9jmm\nCVE-2026-70194\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 2:07:48 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"f938e0bc-3303-391c-9a6a-206a8f2ad5f3","vulnerability":{"id":"CVE-2026-70194","description":"Improper certificate validation in .NET Framework allows an unauthorized attacker to bypass a security feature over a network.","datePublished":"Oct 13, 2026, 7:00:26 PM","dateUpdated":"Oct 31, 2026, 6:06:21 PM","status":"PUBLISHED","baseScore":6.5,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C","references":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70194\n","enisa_id":"EUVD-2026-99702\n","assigner":"microsoft","epss":0.49,"dataProcessed":"Nov 7, 2026, 7:16:50 AM","vulnerabilityProduct":[{"id":"4e544145-399a-341a-b978-f24a11d77270","product":{"name":"Microsoft Visual Studio 2022 version 17.14","vendor":{"name":"Microsoft"}},"product_version":"17.14.0 \u003c17.14.42"},{"id":"678919f9-ff20-37c4-9a41-c70648631f6b","product":{"name":"Microsoft Visual Studio 2026 version 18.10","vendor":{"name":"Microsoft"}},"product_version":"18.10.0 \u003c18.10.4"},{"id":"b8452f7f-aa1c-3bab-9a19-9995f668b1cb","product":{"name":".NET 11.0 runtime","vendor":{"name":"Microsoft"}},"product_version":"11.0.0 \u003c11.0.0-rc.2"}],"vulnerabilityVendor":[{"id":"14dd357a-6de5-3e7d-8064-4ca52541e3fe","vendor":{"name":"Microsoft"}}]}}],"enisaIdAdvisory":[{"id":"bca9aa59-299f-3810-8a4d-a96c4c500870","advisory":{"id":"NCSC-2026-0426","description":"Kwetsbaarheden verholpen in Microsoft Developer Tools","datePublished":"Oct 13, 2026, 6:56:15 PM","dateUpdated":"Oct 13, 2026, 6:56:15 PM","baseScore":0.0,"references":"","aliases":"CVE-2026-58280\nCVE-2026-66822\nCVE-2026-69370\nCVE-2026-69651\nCVE-2026-69905\nCVE-2026-69914\nCVE-2026-69945\nCVE-2026-69969\nCVE-2026-69979\nCVE-2026-70007\nCVE-2026-70035\nCVE-2026-70098\nCVE-2026-70159\nCVE-2026-70161\nCVE-2026-70165\nCVE-2026-70174\nCVE-2026-70175\nCVE-2026-70179\nCVE-2026-70181\nCVE-2026-70183\nCVE-2026-70186\nCVE-2026-70188\nCVE-2026-70190\nCVE-2026-70194\nCVE-2026-70196\nCVE-2026-70197\nCVE-2026-83520\nCVE-2026-84008\nCVE-2026-85363\nCVE-2026-85849\nCVE-2026-85934\nCVE-2026-87697\nCVE-2026-88092\nCVE-2026-96224\nCVE-2026-96225\nCVE-2026-96229\nCVE-2026-96230\nCVE-2026-96231\nCVE-2026-96232\nCVE-2026-96233\nCVE-2026-96234\nCVE-2026-96235\nCVE-2026-96236\nCVE-2026-96237\nCVE-2026-96238\nCVE-2026-96957\nCVE-2026-96958\nCVE-2026-96959\nCVE-2026-96960\nCVE-2026-102229\nCVE-2026-102230\nCVE-2026-102231\nCVE-2026-102232\nCVE-2026-102233\nCVE-2026-102234\nCVE-2026-102235\nCVE-2026-102238\nCVE-2026-102851\nCVE-2026-102870\nCVE-2026-103572\nCVE-2026-108398\nCVE-2026-102869\n","source":{"id":19,"name":"csaf_ncscnl"},"advisoryProduct":[{"id":"005531e7-2123-31f8-b438-0ba813a5e81e","product":{"name":"System.Security.Cryptography.Xml on .NET 10.0 installed on Linux","vendor":{"name":"Microsoft"}}},{"id":"0064ac93-4282-3977-a400-37c16aa6a97b","product":{"name":"System.Security.Cryptography.Xml on .NET 11.0 installed on Windows","vendor":{"name":"Microsoft"}}},{"id":"03ea5b1b-1b60-3840-a9b5-b119564f7f7f","product":{"name":"System.Security.Cryptography.Xml on .NET 9.0 installed on Windows","vendor":{"name":"Microsoft"}}},{"id":"0b776c4d-a402-3617-81ed-0c9fc9c90678","product":{"name":"Microsoft .NET Framework 3.5 AND 4.8.1 on Windows Server 2022","vendor":{"name":"Microsoft"}}},{"id":"0f4d67d3-0bb5-35e2-9358-8da72f1ac049","product":{"name":".NET 9.0 installed on Windows","vendor":{"name":"Microsoft"}}},{"id":"16744c33-1e0e-30d5-83cc-1ce422b8b4b2","product":{"name":".NET 8.0 installed on Windows","vendor":{"name":"Microsoft"}}},{"id":"20087512-bd98-31c6-838c-06cfab89bc07","product":{"name":"Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 version 26H2","vendor":{"name":"Microsoft"}}},{"id":"21cbb928-8e75-3f91-90e5-89c560908f91","product":{"name":"Microsoft .NET Framework 4.8","vendor":{"name":"Microsoft"}}},{"id":"2451a358-e942-3c01-b8cc-82c15519098c","product":{"name":"ASP.NET Core 9.0","vendor":{"name":"Microsoft"}}},{"id":"2466d6de-f2c6-3454-bd37-635747114577","product":{"name":"System.Security.Cryptography.Xml on .NET 10.0 installed on Mac OS","vendor":{"name":"Microsoft"}}},{"id":"2d5bf7cb-5f2e-3c43-b93b-16e777626121","product":{"name":"Microsoft .NET Framework 4.8.1 on Windows 11 version 26H1","vendor":{"name":"Microsoft"}}},{"id":"3295e98f-d765-3547-a371-7cd55f77d625","product":{"name":".NET 9.0 installed on Mac OS","vendor":{"name":"Microsoft"}}},{"id":"35ec7e26-eeac-37f8-80b0-3142e2cacf34","product":{"name":".NET 10.0 installed on Windows","vendor":{"name":"Microsoft"}}},{"id":"3cbba94e-9736-3ea4-993f-6e86ac393f21","product":{"name":".NET 10.0 installed on Mac OS","vendor":{"name":"Microsoft"}}},{"id":"42363be3-3d3a-3219-a3d1-090e931f62dc","product":{"name":"System.Security.Cryptography.Xml on .NET 11.0 installed on Linux","vendor":{"name":"Microsoft"}}},{"id":"49317421-eaa7-3d42-848f-74f38ee5986b","product":{"name":"System.Security.Cryptography.Xml on .NET 11.0 installed on Mac OS","vendor":{"name":"Microsoft"}}},{"id":"5149b6f8-9fee-37e3-8e94-0ec44f8306ca","product":{"name":"ASP.NET Core 11.0","vendor":{"name":"Microsoft"}}},{"id":"5d6dbd25-6880-34ba-9957-c5dae119e4e3","product":{"name":".NET 10.0 installed on Linux","vendor":{"name":"Microsoft"}}},{"id":"5fa73d10-c28d-34d0-bbfe-852b3983571f","product":{"name":"Azure API Center","vendor":{"name":"Microsoft"}}},{"id":"713375d6-e928-3196-9e12-597cd77d7db0","product":{"name":".NET 11.0 installed on Windows","vendor":{"name":"Microsoft"}}},{"id":"83f100a2-b45e-332f-b841-41bbb7d9270d","product":{"name":"Visual Studio Code","vendor":{"name":"Microsoft"}}},{"id":"8bda8360-f51f-39f5-89f9-28c889b2dee2","product":{"name":"Microsoft Visual Studio 2022 version 17.14","vendor":{"name":"Microsoft"}}},{"id":"8c41968a-941c-363d-9374-b739aa5d1ae8","product":{"name":".NET 11.0 installed on Mac OS","vendor":{"name":"Microsoft"}}},{"id":"946a6307-d2fb-3d6f-ad7e-64e193953785","product":{"name":"Microsoft .NET Framework 3.5 AND 4.8.1 on Windows Server 2025","vendor":{"name":"Microsoft"}}},{"id":"9576dee6-996f-30f0-a420-3279296dfba9","product":{"name":"System.Security.Cryptography.Xml on .NET 9.0 installed on Linux","vendor":{"name":"Microsoft"}}},{"id":"b1347ad5-2716-3bd7-b3a1-5116466c3e09","product":{"name":"Microsoft.AspNetCore.Components.WebAssembly.Server on .NET 8.0 installed on Linux","vendor":{"name":"Microsoft"}}},{"id":"c6d33072-e0b4-3313-86c7-5592aec47a75","product":{"name":"ASP.NET Core 8.0","vendor":{"name":"Microsoft"}}},{"id":"d2effc40-e76e-3912-98e8-52a1b0a65068","product":{"name":".NET 9.0 installed on Linux","vendor":{"name":"Microsoft"}}},{"id":"db89200d-4073-300d-90b7-e34369b4f031","product":{"name":"Microsoft.AspNetCore.Components.WebAssembly.Server on .NET 8.0 installed on Mac OS","vendor":{"name":"Microsoft"}}},{"id":"dc78e00e-40f0-3be3-8b60-867bdc135981","product":{"name":"System.Security.Cryptography.Xml on .NET 9.0 installed on Mac OS","vendor":{"name":"Microsoft"}}},{"id":"e0fbdf1b-c4cf-3dbb-8952-e6ad0fa296fa","product":{"name":"Microsoft.AspNetCore.Components.WebAssembly.Server on .NET 8.0 installed on Windows","vendor":{"name":"Microsoft"}}},{"id":"e927c0a4-8f0f-3cb1-82df-bf3aab3ab8f9","product":{"name":".NET 8.0 installed on Mac OS","vendor":{"name":"Microsoft"}}},{"id":"f00dc48f-8233-3a16-8469-b9edf1fd6b11","product":{"name":"System.Security.Cryptography.Xml on .NET 10.0 installed on Windows","vendor":{"name":"Microsoft"}}},{"id":"fd0603de-fa09-36c2-99a7-22c211b76d80","product":{"name":".NET 11.0 installed on Linux","vendor":{"name":"Microsoft"}}},{"id":"fdb51051-4897-37a6-90b5-7a20e41bd5c3","product":{"name":".NET 8.0 installed on Linux","vendor":{"name":"Microsoft"}}},{"id":"fff151d4-9dc9-3021-b9d4-a8a4ffe89352","product":{"name":"ASP.NET Core 10.0","vendor":{"name":"Microsoft"}}}]}},{"id":"d068fac2-93ea-336a-be11-9ca177439e48","advisory":{"id":"WID-SEC-W-2026-3893","description":"Microsoft Entwicklerwerkzeuge: Mehrere Schwachstellen","summary":"Ein Angreifer kann mehrere Schwachstellen in Microsoft .NET Framework, Microsoft .NET, Microsoft ASP.NET, Microsoft Visual Studio 2022, Microsoft Visual Studio 2026, Microsoft Visual Studio Code, Microsoft SysInternals und Microsoft PowerShell ausnutzen, um seine Privilegien zu erhöhen, um Code auszuführen, um Informationen offenzulegen, um Sicherheitsmechanismen zu umgehen und um einen Denial of Service Zustand herbeizuführen.","datePublished":"Oct 13, 2026, 10:00:00 PM","dateUpdated":"Oct 28, 2026, 11:00:00 PM","baseScore":0.0,"references":"https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3893.json\nhttps://wid.cert-bund.de/portal/wid/securityadvisory?name\u003dWID-SEC-2026-3893\n","aliases":"CVE-2026-100205\nCVE-2026-102229\nCVE-2026-102231\nCVE-2026-102232\nCVE-2026-102233\nCVE-2026-102234\nCVE-2026-102235\nCVE-2026-102238\nCVE-2026-102851\nCVE-2026-102869\nCVE-2026-102870\nCVE-2026-103572\nCVE-2026-105016\nCVE-2026-105729\nCVE-2026-105732\nCVE-2026-108398\nCVE-2026-109468\nCVE-2026-58280\nCVE-2026-66822\nCVE-2026-69370\nCVE-2026-69651\nCVE-2026-70007\nCVE-2026-70035\nCVE-2026-70098\nCVE-2026-70159\nCVE-2026-70161\nCVE-2026-70162\nCVE-2026-70165\nCVE-2026-70174\nCVE-2026-70175\nCVE-2026-70179\nCVE-2026-70181\nCVE-2026-70183\nCVE-2026-70186\nCVE-2026-70188\nCVE-2026-70190\nCVE-2026-70194\nCVE-2026-70196\nCVE-2026-70197\nCVE-2026-83520\nCVE-2026-84008\nCVE-2026-85363\nCVE-2026-85790\nCVE-2026-87697\nCVE-2026-88092\nCVE-2026-92707\nCVE-2026-96222\nCVE-2026-96224\nCVE-2026-96225\nCVE-2026-96229\nCVE-2026-96230\nCVE-2026-96231\nCVE-2026-96232\nCVE-2026-96233\nCVE-2026-96234\nCVE-2026-96235\nCVE-2026-96236\nCVE-2026-96237\nCVE-2026-96238\nCVE-2026-96251\nCVE-2026-96303\nCVE-2026-96957\nCVE-2026-96958\nCVE-2026-96959\nCVE-2026-96960\nCVE-2026-97788\nCVE-2026-97801\n","source":{"id":8,"name":"csaf_certbund"},"advisoryProduct":[{"id":"0340e93b-e31d-31c8-9716-c4971e513544","product":{"name":"4.7","vendor":{"name":"Microsoft"}}},{"id":"03c9c371-3cb7-302c-a7c0-9c05938ff6e8","product":{"name":"SysInternals","vendor":{"name":"Microsoft"}}},{"id":"0ac83f74-b3dc-304d-ab10-d6963613cf12","product":{"name":"11","vendor":{"name":"Johnson Controls Inc"}}},{"id":"21a3f534-4ba8-3a00-9e47-8c0c83e6a34b","product":{"name":"Red Hat Enterprise Linux","vendor":{"name":"Red Hat"}}},{"id":"22f71178-78df-30dc-9023-f27809c7b39c","product":{"name":".NET","vendor":{"name":"Microsoft"}}},{"id":"23edd4a1-5a5b-30ec-9d5d-5c0981459269","product":{"name":"Microsoft Visual Studio Code","vendor":{"name":"Microsoft"}}},{"id":"2e108811-5978-3adb-9a0e-16130ec8031c","product":{"name":"4.8.1","vendor":{"name":"Microsoft"}}},{"id":"34ebc4d2-395d-3450-8e9c-31e56187cf1e","product":{"name":"4.8","vendor":{"name":"Microsoft"}}},{"id":"3b371dad-aaae-3522-bedd-a36f6148fd4b","product":{"name":"RESF Rocky Linux","vendor":{"name":"RESF"}}},{"id":"5a10e7cf-eae5-3db9-8d85-767701f65e2f","product":{"name":"Oracle Linux","vendor":{"name":"Oracle Corporation"}}},{"id":"6115b60c-ecd1-33b2-8204-57e664bb310d","product":{"name":"4.7.2","vendor":{"name":"Microsoft"}}},{"id":"6c421a13-fd00-3275-8347-a7f6d33b163c","product":{"name":"10","vendor":{"name":"Johnson Controls Inc"}}},{"id":"731dc4cd-be7e-3a40-ae24-619da672e2d4","product":{"name":"Ubuntu Linux","vendor":{"name":"Canonical"}}},{"id":"79081812-d806-390a-bb45-610d615d0c71","product":{"name":".NET Framework","vendor":{"name":"Microsoft"}}},{"id":"7935fc7e-63b8-32aa-8f72-d3be4bb14062","product":{"name":"Core 10.0","vendor":{"name":"Microsoft"}}},{"id":"7a37837c-55aa-3842-ac93-a89ed40d8b57","product":{"name":"7.6","vendor":{"name":"OpenBSD"}}},{"id":"8464fe56-2245-3772-bcb7-2ce4e0849161","product":{"name":"3.5","vendor":{"name":"Microsoft"}}},{"id":"8491a010-e09c-36f9-8793-3da2b347e064","product":{"name":"Fedora Linux","vendor":{"name":"Fedora"}}},{"id":"88a3eb7f-0a2d-3d83-ba6a-7fb565e04d3e","product":{"name":"4.7.1","vendor":{"name":"Microsoft"}}},{"id":"96663408-331d-3be4-9821-baee53eaed32","product":{"name":"Microsoft Visual Studio 2022","vendor":{"name":"Microsoft"}}},{"id":"9cc63617-e6d6-3dec-bcb1-cb3637c83420","product":{"name":"8","vendor":{"name":"National Oceanic and Atmospheric Administration (NOAA)"}}},{"id":"a42f41bd-00df-34ef-ad93-957fe0b905a1","product":{"name":"suite","vendor":{"name":"frappe"}}},{"id":"b0799acb-e04f-3a6a-a138-96edf96a610a","product":{"name":"ASP.NET","vendor":{"name":"Microsoft"}}},{"id":"b6b1e21b-3cb9-3ba5-a11a-65c4547cc661","product":{"name":"Core 11.0","vendor":{"name":"Microsoft"}}},{"id":"c6e73efc-ae5a-33ca-9dc4-02fd378cff3a","product":{"name":"9","vendor":{"name":"NetApp"}}},{"id":"ca1e0db2-25ac-3899-8644-de0c25421ef9","product":{"name":"Core 8.0","vendor":{"name":"Microsoft"}}},{"id":"d366f78c-999d-382e-a819-eb3900735d86","product":{"name":"4.6.2","vendor":{"name":"open source"}}},{"id":"d518e09f-0bc2-3ea6-9d84-daa73e056e38","product":{"name":"Core 9.0","vendor":{"name":"Microsoft"}}},{"id":"d877fca2-dac8-30aa-86b1-d9f69483c4b2","product":{"name":"7.4","vendor":{"name":"AVEVA Software, LLC"}}},{"id":"e1548bc1-8b2a-360e-8600-045722d0f2a3","product":{"name":"Microsoft Visual Studio 2026","vendor":{"name":"Microsoft"}}},{"id":"e28c6dd0-e838-3510-90e8-10b54febe4de","product":{"name":"7.5","vendor":{"name":"OpenBSD"}}},{"id":"e50e4638-bf31-3f9e-85be-5c76ef507287","product":{"name":"PowerShell","vendor":{"name":"Microsoft"}}},{"id":"f362c276-1be6-31ad-83fc-bceab2e1b52b","product":{"name":"Windows Process Monitor","vendor":{"name":"Microsoft"}}}]}}]}