CVE-2026-62897

.NET Framework is the software platform many Windows apps rely on. This vulnerability is like a math mistake in that platform: if someone can get a user to open a specially crafted file, it may let an attacker run malicious code on the machine. That code could then work with the same high permissions the user has, which can lead to serious damage.

This matters if you run Windows software that uses the listed .NET Framework/.NET/.NET versions or you have Visual Studio 2022 or Visual Studio 2026 installed on your business computers. The weakness requires an attacker to have local access and to trick a user into interacting with a malicious file, so it’s not a “drive-by internet” risk by itself.

Risk is primarily if an attacker can reach a user locally (for example, through an already-compromised device or a close-by scenario) and then get that user to open a malicious file using the vulnerable .NET/.NET Framework component.

This is urgent (RED) because the vulnerability can be used to execute code locally with high privileges after user interaction, and there is security reporting naming the Lazarus group as an actor relevant to this patch cycle. Even though there’s no clear dated public claim of exploitation in the news findings and no public exploit code was found, you should treat this as an active, high-value target for attackers.

Update immediately across all machines that run the vulnerable .NET/.NET Framework and Visual Studio versions listed in the fix guidance.