Oct 2026: .NET Information Disclosure Vulnerability
CVE-2026-96229 Published on October 13, 2026
.NET Information Disclosure Vulnerability
Permissive list of allowed inputs in .NET allows an unauthorized attacker to disclose information over a network.
Weakness Type
What is an Allowlist / Allow List Vulnerability?
The product implements a protection mechanism that relies on a list of inputs (or properties of inputs) that are explicitly allowed by policy because the inputs are assumed to be safe, but the list is too permissive - that is, it allows an input that is unsafe, leading to resultant weaknesses.
CVE-2026-96229 has been classified to as an Allowlist / Allow List vulnerability or weakness.
Products Associated with CVE-2026-96229
Want to know whenever a new CVE is published for Microsoft products? stack.watch will email you.
Affected Versions
Microsoft .NET 10.0:- Version 10.0.0 and below 10.0.13 is affected.
- Version 11.0.0 and below 11.0.0-rc.2 is affected.
- Version 8.0.0 and below 8.0.32 is affected.
- Version 9.0.0 and below 9.0.21 is affected.
- Version 17.14.0 and below 17.14.42 is affected.
- Version 18.10.0 and below 18.10.4 is affected.