Origin validation error in Microsoft products - CVE-2026-96234
Published: October 14, 2026
Vulnerability identifier: #VU155434
CSH Severity: Medium
CVSS v4: 5.6 [CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-96234
CWE-ID: CWE-346
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to disclose credentials.
The vulnerability exists due to an origin validation error in .NET when validating origins during network interactions. A remote attacker can exploit this error over a network to disclose credentials.
Successful exploitation requires user interaction and additional actions to prepare the target environment.
Affected software
.NET
Visual Studio
Microsoft .NET Framework
Visual Studio
Microsoft .NET Framework
How to mitigate CVE-2026-96234
Install security update from vendor's website.
.NET - addressed in versions 8.0.32, 9.0.21
Visual Studio - update to 17.14.42
Microsoft .NET Framework - update to 10.0.13
Visual Studio - update to 17.14.42
Microsoft .NET Framework - update to 10.0.13