CVE-2026-47304

Analyzed Analyzed - Analysis Complete

Improper Cryptographic Signature Verification in .NET Framework

Publication date: 2026-07-14

Last updated on: 2026-07-24

Assigner: Microsoft Corporation

Description

Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-14

Last Modified

2026-07-24

Generated

2026-08-04

AI Q&A

2026-07-15

EPSS Evaluated

2026-08-02

NVD

CVE-2026-47304

EUVD

EUVD-2026-44355

Affected Vendors & Products

Vendor	Product	Version / Range
microsoft	.net_framework	4.8.1
microsoft	.net_framework	4.8
microsoft	.net_framework	4.6.2
microsoft	.net_framework	4.7
microsoft	.net_framework	4.7.1
microsoft	.net_framework	4.7.2
microsoft	.net_framework	3.5
microsoft	.net	From 8.0.0 (inc) to 8.0.29 (exc)
microsoft	.net	From 9.0.0 (inc) to 9.0.18 (exc)
microsoft	.net	From 10.0.0 (inc) to 10.0.6 (exc)
microsoft	visual_studio_2017	From 15.0 (inc) to 15.9 (inc)
microsoft	visual_studio_2019	From 16.0 (inc) to 16.11 (inc)
microsoft	visual_studio_2022	From 17.12.0 (inc) to 17.12.22 (exc)
microsoft	visual_studio_2022	From 17.14.0 (inc) to 17.14.36 (exc)
microsoft	visual_studio_2026	From 18.7.0 (inc) to 18.7.4 (exc)
microsoft	visual_studio_2026	18.5.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-347	The product does not verify, or incorrectly verifies, the cryptographic signature for data.
CWE-345	The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.

Attack-Flow Graph

Executive Summary

This vulnerability involves improper verification of cryptographic signatures in .NET. An unauthorized attacker can exploit this over a network to bypass a security feature designed to protect data integrity and authenticity.

Impact Analysis

An attacker could bypass security measures, potentially allowing unauthorized access to sensitive data or execution of malicious actions. This could lead to data breaches, system compromise, or other security incidents depending on the affected .NET application.

Compliance Impact

This vulnerability may lead to non-compliance with regulations requiring data integrity and protection, such as GDPR or HIPAA. Bypassing security features could result in unauthorized data access, violating confidentiality and integrity requirements.

Mitigation Strategies

Apply the latest security updates from Microsoft for .NET to address the improper cryptographic signature verification issue. Monitor the Microsoft Security Response Center for patches and follow their guidance.

Hi! I’m here to help you understand CVE-2026-47304. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70