CVE-2026-35433 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	7.3 HIGH	LOCAL	LOW	NONE	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L

Base Score

CVSS 3.x

EPSS Score

Percentile: 40%

Affected Products (NVD)

Vendor	Product	Version
microsoft	.net_framework	4.8
microsoft	.net_framework	3.5
microsoft	.net	8.0.0 ≤ 𝑥 < 8.0.27
microsoft	.net	9.0.0 ≤ 𝑥 < 9.0.16
microsoft	.net	10.0.0 ≤ 𝑥 < 10.0.8
microsoft	.net_framework	3.5
microsoft	.net_framework	4.8.1
microsoft	.net_framework	3.5
microsoft	.net_framework	4.8
microsoft	.net_framework	3.5
microsoft	.net_framework	4.7.2

𝑥

= Vulnerable software versions

Windows Releases

Platform

Version

Windows 10

1607 (x64)	KB5087065
1809 (arm64, x64)	KB5087061
1809 (arm64, x64)	KB5087066
21H2 (arm64, x64)	KB5087053
21H2 (arm64, x64)	KB5087064
22H2 (arm64, x64)	KB5087064

Windows 11

23H2 (arm64, x64)	KB5087058
24H2 (arm64, x64)	KB5087054
25H2 (arm64, x64)	KB5087051
26H1 (arm64, x64)	KB5087055

Windows Server 2012

Standard	KB5087048
Standard	KB5087067

Windows Server 2012 R2

Standard	KB5087049
Standard	KB5087063

Windows Server 2016

Standard

Windows Server 2022

Standard	KB5087059
Standard	KB5087068

Windows Server 2025

Standard

Common Weakness Enumeration

CWE-20 - Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-35433