What is the CVSS score of CVE-2026-32177?

CVE-2026-32177 has a CVSS 3.1 base score of 7.3 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L. EPSS exploitation probability: 0.1%.

Which versions of .NET Framework are affected by CVE-2026-32177?

CVE-2026-32177 is a local privilege escalation vulnerability in Microsoft .NET Framework (versions 3.5-10.0) and Visual Studio 2017 that allows unprivileged users to achieve code execution through…. A patch is available.

Is there a public PoC exploit available for CVE-2026-32177?

Yes, a public proof-of-concept exploit is available for CVE-2026-32177. Prioritise patching immediately. EPSS: 0.1%.

.NET Framework CVE-2026-32177

EUVD-2026-29572 HIGH

Heap-based Buffer Overflow (CWE-122)

2026-05-12 microsoft

Buffer Overflow Heap Overflow

7.3

CVSS 3.1

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

Low

Lifecycle Timeline

Analysis Generated

May 12, 2026 - 18:31 vuln.today

CVE Published

May 12, 2026 - 16:58 nvd

HIGH 7.3

DescriptionNVD

Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally.

AnalysisAI

Local privilege escalation in Microsoft .NET Framework (versions 3.5 through 10.0) and Visual Studio 2017 occurs through heap-based buffer overflow exploitation requiring user interaction with a malicious file. Attackers without initial privileges can achieve high-level code execution and data access by convincing a user to open a specially crafted document or application. …

RemediationAI

Within 24 hours: Identify all systems running .NET Framework versions 3.5-10.0 and Visual Studio 2017 using asset inventory or SCCM. Within 7 days: Apply Microsoft-released patches across all affected .NET Framework versions and Visual Studio 2017 per MSRC advisory; prioritize developer workstations and servers processing untrusted .NET content. …

Analysis

Detailed AI-generated intelligence summary covering attack vector, impact assessment, affected versions, remediation steps, and indicators of compromise.

POChttps://••••••••••.com/exploit

PATCHhttps://••••••••••.com/patch

ADVISORYhttps://••••••••••.com/advisory

Full analysis requires sign-in

Get intelligence summaries, risk assessment, exploit details, threat intel, and remediation guidance.

CVE-2026-32177 vulnerability details – vuln.today

Back