CVE-2026-108398

Microsoft Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 CWE-426

Untrusted search path in .NET Framework allows an authorized attacker to bypass a security feature locally.

CVSS Score

8.8

High

EPSS — Exploit Probability

—

Awaiting FIRST.org data · checked 2026-10-13

Exploitation

Not in CISA KEV

KEV does not include every exploited vulnerability

Remediation

Patch available

Vendor fix published

2 articles across 2 outlets · first covered Oct 13, 2026 · latest Oct 14, 2026

Coverage timeline