CVE catalog

CVE-2026-62886

UBUNTU-CVE-2026-62886

[CVE catalog]

Severity
High · CVSS 7.8CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.47% · Oct 25, 2026

Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Ubuntudotnet722.047.0.105-0ubuntu1~22.04.1vulnerable
Ubuntudotnet722.047.0.107-0ubuntu1~22.04.1vulnerable
Ubuntudotnet722.047.0.108-0ubuntu1~22.04.1vulnerable
Ubuntudotnet722.047.0.109-0ubuntu1~22.04.1vulnerable
Ubuntudotnet722.047.0.110-0ubuntu1~22.04.1vulnerable
Ubuntudotnet722.047.0.111-0ubuntu1~22.04.1vulnerable
Ubuntudotnet722.047.0.112-0ubuntu1~22.04.1vulnerable
Ubuntudotnet722.047.0.113-0ubuntu1~22.04.1vulnerable
Ubuntudotnet722.047.0.114-0ubuntu1~22.04.1vulnerable
Ubuntudotnet722.047.0.115-0ubuntu1~22.04.1vulnerable
Ubuntudotnet722.047.0.116-0ubuntu1~22.04.1vulnerable
Ubuntudotnet722.047.0.117-0ubuntu1~22.04.1vulnerable
Ubuntudotnet722.047.0.117-0ubuntu1~22.04.2vulnerable
Ubuntudotnet722.047.0.119-0ubuntu1~22.04.1vulnerable
Cpevisual_studio_2022Not reported17.14.38fixed
Cpevisual_studio_2026Not reported18.8.3fixed
Cpe.netNot reported10.0.11fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Cpevisual_studio_2022cpeNot reported17.14.38Not reportedNVD-CVE-2026-62886Not reported
Cpevisual_studio_2026cpeNot reported18.8.3Not reportedNVD-CVE-2026-62886Not reported
Cpe.netcpeNot reported10.0.11Not reportedNVD-CVE-2026-62886Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX]