CVE-2026-21218
unknown
CVSS v3
—
CVSS v2
—
VIR risk
—
Description
Microsoft Security Advisory CVE-2026-21218 | .NET Security Feature Bypass Vulnerability
Predictions
Exploit likelihood
20%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.
Package impact
| Ecosystem | Package | Vulnerable | Fixed |
|---|---|---|---|
| NuGet | System.Security.Cryptography.Cose | >=8.0.0,<8.0.2 | 8.0.2 |
| NuGet | System.Security.Cryptography.Cose | >=9.0.0,<9.0.13 | 9.0.13 |
| NuGet | System.Security.Cryptography.Cose | >=10.0.0,<10.0.3 | 10.0.3 |
References
Verify integrity in audit chain (admin only). AS-IS.