Oct 2026: .NET Remote Code Execution Vulnerability
CVE-2026-83520 Published on October 13, 2026

.NET Remote Code Execution Vulnerability
Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.

Vendor Advisory NVD

Vulnerability Analysis

Exploitation:

NONE

Automatable:

NO

Technical Impact:

TOTAL

Weakness Type

What is a Marshaling, Unmarshaling Vulnerability?

The application deserializes untrusted data without sufficiently verifying that the resulting data will be valid.

CVE-2026-83520 has been classified to as a Marshaling, Unmarshaling vulnerability or weakness.

Products Associated with CVE-2026-83520

Want to know whenever a new CVE is published for Microsoft products? stack.watch will email you.

Microsoft Visual Studio 2026 Version 18 10

  Watch

Microsoft Net

  Watch

Microsoft .NET Framework

  Watch

Microsoft Visual Studio 2022

  Watch

Affected Versions

• Version 10.0.0 and below 10.0.13 is affected.

• Version 11.0.0 and below 11.0.0-rc.2 is affected.

• Version 8.0.0 and below 8.0.32 is affected.

• Version 9.0.0 and below 9.0.21 is affected.

• Version 3.5.0 and below 2.0.50727.9188 AND 3.0.30729.9171 is affected.

• Version 3.0.0.0 and below 2.0.50727.8987 AND 3.0.30729.8982 AND 4.7.4150.0 is affected.

• Version 4.7.0 and below 2.0.50727.9073 AND 3.0.30729.9070 AND 4.7.4150.0 is affected.

• Version 4.8.0 and below 2.0.50727.9073 AND 3.0.30729.9070 AND 4.8.4811.0 is affected.

• Version 4.8.1 and below 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 is affected.

• Version 4.7.0 and below 4.7.4150.0 is affected.

• Version 4.8.0 and below 4.8.4811.0 is affected.

• Version 4.8.0.0 and below 4.8.9363.0 is affected.

• Version 17.14.0 and below 17.14.42 is affected.

• Version 18.10.0 and below 18.10.4 is affected.