← Back to CVE intelligence
CVE intelligence

CVE-2026-62886

Vulnerability intelligence

Published Aug 11, 2026Sources checked Oct 28, 2026
7.8HIGHCVSS out of 10
What this means

Review the available evidence

CVE-2026-62886 and is rated High severity with a CVSS score of 7.8. It is not in the current CISA KEV record we collected. That does not prove exploitation has not occurred.

What to do next

Remediation and response

Microsoft Security Response Center guidance

Vendor revision: Aug 17, 2026
Vendor remediation details

Install KB5127660. Install KB5126044. Install KB5126049. Install KB5126051. Install KB5126047. Install KB5127666. Install KB5127685. Install KB5127693. Install KB5126043. Install KB5120703. Install KB5126046. Install KB5126421. Install KB5126052. Install KB5120747. Install KB5126053. Install KB5127664. Install KB5126045. Install KB5126868. Install KB5127687. Install KB5127690. Install KB5123099. Install KB5126424. Install KB5127689. Install KB5127692. Install KB5127694.

Vendor-listed releases

  • 2.0.50727.8987 AND 3.0.30729.8982
  • 4.7.4145.0
  • 4.8.4806.0
  • 2.0.50727.9073 AND 3.0.30729.9070 AND 4.7.4150.0
  • 2.0.50727.9073 AND 3.0.30729.9070 AND 4.8.4811.0
  • 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0
  • 2.0.50727.9070 & 3.0.30729.9068 & 4.7.4145.0
  • 2.0.50727.9070 & 3.0.30729.9068 & 4.8.4805.0
  • 2.0.50727.9183 & 3.0.30729.9169 & 4.8.4806.0
  • 2.0.50727.9183 & 3.0.30729.9169 & 4.8.9346.0
  • 2.0.50727.9183 & 3.0.30729.9169 & 4.8.9347.0
  • 2.0.50727.9183 & 3.0.30729.9169
  • 4.8.9347.0
  • 2.0.50727.8987 AND 3.0.30729.8982 AND 4.7.4150.0
  • 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.4811.0
  • 2.0.50727.8984 & 3.0.30729.8980 & 4.7.4145.0
  • 18.8.3
  • 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.10008.0
CISA KEVNot listedBased on the latest collected catalog
EPSS0.5%Estimated 30-day exploitation probability
Ransomware useNot markedCISA KEV ransomware field
Threat actors0Source-linked actor relationships
Overview

What is CVE-2026-62886?

Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally.

Source: NVD