CVE-2026-58649: .net 11.0.0 · update preview1, 11.0.0 · update preview2, 11.0.0 · update preview3 (+4 more affected versions); +9 more…

Affected technology

.net · 11.0.0 · update preview1
microsoft

.net · 11.0.0 · update preview2
microsoft

.net · 11.0.0 · update preview3
microsoft

.net · 11.0.0 · update preview4
microsoft

.net · 11.0.0 · update preview5
microsoft

.net · 11.0.0 · update preview6
microsoft

.net · 11.0.0 · update preview7
microsoft

.net sdk · from 8.0.100 (inclusive), before 8.0.130 (exclusive)
microsoft

.net sdk · from 8.0.200 (inclusive), before 8.0.424 (exclusive)
microsoft

.net sdk · from 9.0.100 (inclusive), before 9.0.120 (exclusive)
microsoft

.net sdk · from 9.0.200 (inclusive), before 9.0.317 (exclusive)
microsoft

.net sdk · from 10.0.100 (inclusive), before 10.0.111 (exclusive)
microsoft

.net sdk · from 10.0.200 (inclusive), before 10.0.400 (exclusive)
microsoft

visual studio 2022 · from 17.14.0 (inclusive), before 17.14.40 (exclusive)
microsoft

visual studio 2026 · from 18.9.0 (inclusive), before 18.9.3 (exclusive)
microsoft

.NET 10.0 · 10.0.0 to before 10.0.111, 10.0.400
Microsoft

.NET 11.0 · 11.0.0 to before 11.0 RC1
Microsoft

.NET 8.0 · 8.0.0 to before 8.0.130, 8.0.424
Microsoft

.NET 9.0 · 9.0.0 to before 9.0.120, 9.0.317
Microsoft

Microsoft Visual Studio 2022 version 17.14 · 17.14.0 to before 17.14.40
Microsoft

Microsoft Visual Studio 2026 version 18.9 · 18.9.0 to before 18.9.3
Microsoft

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Network (remote) · No privileges required · User interaction required

What an attacker can do

An unauthorized attacker can disclose information over a network. Vendor/CNA’s CVSS 3.1 assessment (base score 6.5/10) rates confidentiality impact as high; integrity and availability impact as none.