{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-10-14T02:21:58.458","vulnerabilities":[{"cve":{"id":"CVE-2026-108398","sourceIdentifier":"secure@microsoft.com","published":"2026-10-13T19:18:04.963","lastModified":"2026-10-13T23:17:30.117","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"Untrusted search path in .NET Framework allows an authorized attacker to bypass a security feature locally."}],"affected":[{"source":"secure@microsoft.com","affectedData":[{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2","platforms":["Windows 10 version 1607","Windows Server 2016","Windows Server 2019"],"versions":[{"version":"3.0.0.0","lessThan":"2.0.50727.8987 AND 3.0.30729.8982 AND 4.7.4150.0","versionType":"custom","status":"affected"}]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.7.2","platforms":["Windows 10 version 1809"],"versions":[{"version":"4.7.0","lessThan":"2.0.50727.9073 AND 3.0.30729.9070 AND 4.7.4150.0","versionType":"custom","status":"affected"}]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.8","platforms":["Windows 10 version 1809","Windows 10 version 21H2","Windows 10 version 22H2","Windows Server 2019","Windows Server 2022"],"versions":[{"version":"4.8.0","lessThan":"2.0.50727.9073 AND 3.0.30729.9070 AND 4.8.4811.0","versionType":"custom","status":"affected"}]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.8.1","platforms":["Windows 10 version 21H2","Windows 10 version 22H2","Windows 11 version 23H2","Windows 11 version 24H2","Windows 11 version 25H2","Windows 11 version 26H2","Windows Server 2022","Windows Server 2025"],"versions":[{"version":"4.8.1","lessThan":"2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0","versionType":"custom","status":"affected"}]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2","platforms":["Windows Server 2012","Windows Server 2012 R2"],"versions":[{"version":"4.7.0","lessThan":"4.7.4150.0","versionType":"custom","status":"affected"}]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 4.8","platforms":["Windows 10 version 1607","Windows Server 2012","Windows Server 2012 R2","Windows Server 2016"],"versions":[{"version":"4.8.0","lessThan":"4.8.4811.0","versionType":"custom","status":"affected"}]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 4.8.1","platforms":["Windows 11 version 26H1"],"versions":[{"version":"4.8.0.0","lessThan":"4.8.9363.0","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"secure@microsoft.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.0,"impactScore":6.0}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-10-13T22:17:39.221098Z","id":"CVE-2026-108398","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"secure@microsoft.com","type":"Secondary","description":[{"lang":"en","value":"CWE-426"}]}],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108398","source":"secure@microsoft.com"}]}}]}