CVE-2026-108398Vulnerability

1. “…2026-78406, CVE-2026-16916, CVE-2026-16823, CVE-2026-19491 (IBM Verify Identity Access and Security Verify Access), CVE-2026-96951, CVE-2026-108398, CVE-2026-92707, CVE-2026-70242, CVE-2026-102866, CVE-2026-105016, CVE-2026-65674, CVE-2026-83498 (Microsoft Windows), CVE-2026-7458…”

   The Hacker NewsNews19 Oct 2026
   ⚡ Weekly Recap: 98 Zero-Days, Rogue AI Agents, $100M Crypto Theft, 700 Supermarkets Hit and More

2. “Two publicly disclosed flaws complete the zero-day count: CVE-2026-108398, a .NET Framework bypass of Windows Defender Application Control, and CVE-2026-92707, a denial of service flaw in the MessagePack-CSharp library.”

   SOCRadarVendor14 Oct 2026
   October 2026 Patch Tuesday: 1,413 Flaws, 3 Zero-Days

3. “Another one to keep an eye on is CVE-2026-108398 (CVSS score 8.8 out of 10), where an untrusted search path in .NET Framework allows an authorized attacker to bypass a security feature locally.”

   Malwarebytes LabsVendor14 Oct 2026
   Update Windows: Record Patch Tuesday fixes flaw already under attack

4. “One such flaw this month is CVE-2026-108398, a .NET framework security feature bypass vulnerability with a CVSS score of 8.8.”

   Infosecurity MagazineNews14 Oct 2026
   Microsoft Breaks Patch Tuesday Record Again with 1400+ CVEs

5. “One of them is CVE-2026-108398, which allows an attacker to bypass Windows Defender Application Control (WDAC) enforcement.”

   SecurityWeekNews14 Oct 2026
   Microsoft Patches Record 1,413 Vulnerabilities, Including Exploited Windows Zero-Day

6. “CVE-2026-108398 (CVSS score: 8.8) - An untrusted search path vulnerability in .NET Framework that allows an authorized attacker to bypass a security feature locally.”

   The Hacker NewsNews14 Oct 2026
   Microsoft Patches Record 1,413 Flaws, Including Exploited Windows Shell Bug

7. “Bulletin de sécurité Microsoft .Net CVE-2026-108398 du 13 octobre 2026”

   CERT-FRGovernment14 Oct 2026
   Multiples vulnérabilités dans Microsoft .Net (14 octobre 2026)

8. “While Microsoft said there are no signs anyone is exploiting it yet, a security feature bypass in the .NET Framework (CVE-2026-108398) was publicly disclosed prior to today, potentially giving attackers advance time to work out how to exploit the bug.”

   Krebs on SecurityNews13 Oct 2026
   Microsoft Patches More Than 1,400 Security Flaws

9. “CVE-2026-108398 |.NET Framework security feature bypass vulnerability”

   TenableVendor13 Oct 2026
   Microsoft’s October 2026 Patch Tuesday addresses 1407 CVEs (CVE-2026-96951)

10. “Microsoft is aware of some level of public disclosure of CVE-2026-108398, a .NET Framework security feature bypass.”

    Rapid7Vendor13 Oct 2026
    Patch Tuesday - October 2026

11. “CVE-2026-108398: .NET Framework Security Feature Bypass Vulnerability”

    Qualys Threat ResearchVendor13 Oct 2026
    Microsoft Patch Tuesday, October 2026 Security Update Review

12. “CVE-2026-108398: This vulnerability, a .NET framework security feature bypass, could be used to bypass application control and execute unauthorized applications.”

    SANS Internet Storm CenterVendor13 Oct 2026
    October 2026 Microsoft Patch Tuesday, (Tue, Oct 13th)

13. “| CVE-2026-108398 | 8.80 | Omzeilen van beveiligingsmaatregel |”

    NCSC-NL advisoriesGovernment13 Oct 2026
    NCSC-2026-0426 [1.00] [M/H] Kwetsbaarheden verholpen in Microsoft Developer Tools

Also named with it: CVE-2026-96951, CVE-2026-92707, CVE-2026-70242, CVE-2026-105016, CVE-2026-58280, CVE-2026-66822, CVE-2026-69651, CVE-2026-70161, CVE-2026-70165, CVE-2026-70174, CVE-2026-70190, CVE-2026-70197, CVE-2026-83520, CVE-2026-84008, CVE-2026-87697, CVE-2026-96224, CVE-2026-96225, CVE-2026-96229, CVE-2026-96231, CVE-2026-96232