Integer overflow or wraparound in components of the Microsoft .NET Framework allows an attacker to gain privileges beyond what is intended. The flaw permits an unauthorized network actor to execute privileged operations that should be restricted, compromising system integrity. This weakness is classified as CWE-190.

Microsoft .NET Framework versions 3.5 through 4.8.1, the newer .NET releases .NET 8, .NET 9, .NET 10, and .NET 11, as well as Microsoft Visual Studio 2022 version 17.14 and Visual Studio 2026 version 18.10 are all affected when the relevant library components are present on the target system.

The CVSS score of 8.8 categorizes this vulnerability as high severity. No EPSS score is available, so the current exploitation probability is unclear, but the lack of CVE listing in the CISA KEV catalog does not reduce the need for remediation. Attackers would likely deliver crafted data over a network to trigger the overflow, so systems exposed to untrusted network traffic must be protected. Given the high impact and potential network-based exploitation, prompt patching is strongly recommended.