PT-2026-112017 · Microsoft · .Net Framework+1
CVE-2026-108398
·
Published
2026-10-13
·
Updated
2026-10-14
CVSS v3.1
8.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Microsoft .NET Framework versions 3.5 through 4.8.1
Description
An untrusted search path issue exists that allows an authenticated local attacker to bypass Windows Defender Application Control (WDAC) restrictions. The attack involves using a specially crafted .NET assembly registered for loading by a protected process, which could lead to the execution of unauthorized code within that process.
Recommendations
Deploy the October 13 security updates for Microsoft .NET Framework versions 3.5 through 4.8.1.
Maintain WDAC enforcement and restrict local privileges.
Fix
Untrusted Search Path
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
.Net Framework
Windows Defender Application Control