onyx --cves cve-2026-35433

CVE-2026-35433

score: <0.1
cvss: 7.3
epss: 0.6%
published: 2026-05-12
kev added: —
first seen: 2026-10-21

.NET contains a privilege escalation caused by improper input validation, letting unauthorized local attackers elevate their privileges, exploit requires local access.

Timeline

How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.

2026-05-12 Published
2026-10-21 Tracked by Onyx

Weaknesses

CWE-20 NVD-CWE-noinfo

References 4

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-35433
https://access.redhat.com/security/cve/CVE-2026-35433
https://bugzilla.redhat.com/show_bug.cgi?id=2476577
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-35433.json