CVE-2026-35433

Awaiting Analysis Awaiting Analysis - Queue

Publication date: 2026-05-12

Last updated on: 2026-06-09

Assigner: Microsoft Corporation

Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally.

Probability:
Percentile:

Published

2026-05-12

Last Modified

2026-06-09

Generated

2026-06-10

EPSS Evaluated

2026-06-08

NVD

Currently, no data is known.

CWE

KEV

CWE ID	Description
CWE-190	The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.
CWE-20	The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

AI Quick Actions have not been generated yet.

Hi! I’m here to help you understand CVE-2026-35433. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70