Improper verification of cryptographic signatures in Microsoft .NET allows an attacker to bypass a security mechanism that depends on those signatures. The flaw exposes a path for unauthorized actions that the signature check was intended to prevent, potentially enabling the attacker to gain access or privileges beyond what is normally allowed.

Affected products include Microsoft .NET 10.0, Microsoft .NET 11.0, Visual Studio 2022 version 17.14, and Visual Studio 2026 version 18.10.

The CVSS score of 8.8 indicates high severity, and the absence of a KEV listing and an unavailable EPSS score suggest that widespread exploitation has not yet been observed. Because the description references bypass over a network, the likely attack vector is remote exploitation through network traffic that carries manipulated signatures. An attacker who succeeds can exploit the vulnerable signature verification to bypass protections and perform actions the application would normally reject.