.net framework

CVE-2026-50650 is a newly patched .NET Framework code-injection vulnerability that can let an unauthorized attacker elevate privileges on a Windows system. Microsoft released the fix on July 14, 2026, rating the flaw Important with a CVSS 3.1 base score of 7.8. Detailed in Microsoft’s Security...

CVE-2026-50527 exposes supported versions of .NET and .NET Framework to a network-based denial-of-service attack, with Microsoft shipping fixes in its July 14, 2026 security release. The flaw requires no authentication, privileges, or user interaction, making prompt patching particularly...

Microsoft has patched CVE-2026-47302, a denial-of-service vulnerability in .NET Framework, through the July 14, 2026 security updates. Windows administrators should treat the flaw as an availability risk for applications and services built on affected .NET Framework components and deploy the...

Microsoft’s decision to end support for ASP.NET Core 2.3 on .NET Framework on April 7, 2027 is less a sudden reversal than the final act in a long, awkward compatibility story. The move closes the book on the last supported package line that let legacy ASP.NET Core applications keep running on...