CVE-2026-96224
Description
A flaw was found in .NET. An out-of-bounds write vulnerability allows a remote attacker to achieve arbitrary code execution over the network. By tricking a user or application into processing specially crafted data, an attacker can corrupt memory and execute unauthorized commands with the privileges of the target process.
Statement
Red Hat has evaluated this vulnerability as having an Important severity rating because remote code execution is possible, but successful exploitation requires an application or user to parse maliciously crafted input rather than allowing unauthenticated direct exploitation. In typical Red Hat deployments, .NET applications handling external or untrusted data could allow an adversary to execute arbitrary commands within the security context of the running service process. Environments where .NET runtimes operate solely on isolated internal data or without parsing external untrusted input face significantly lower exposure.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
