CVE-2010-3958: The x86 JIT compiler in Microsoft .NET Framework 2.0 SP2, 3.5 SP1, 3.5.1, and 4.0 does not properly compile...

Security readout for executives and security teams

This flaw affects older Microsoft .NET Framework versions. A specially crafted XBAP, ASP.NET application, or .NET application could trigger incorrect x86 JIT compilation and allow remote code execution. The provided sources do not show active exploitation or a CVSS score. Exposure is most likely on Windows systems running .NET Framework 2.0 SP2, 3.5 SP1, 3.5.1, or 4.0, especially where browser-hosted XAML, ASP.NET, or untrusted .NET code can execute. Prioritize remediation for internet-facing or user-exposed systems running affected .NET versions. The business risk is remote code execution, but urgency should be balanced by the absence of supplied evidence for active exploitation. Mitigation focus: Review Microsoft MS11-028 guidance for the affected .NET versions.; Apply the applicable Microsoft security update where systems remain in scope.; Inventory and remove unsupported .NET versions where not operationally required..

Prepared

Jun 24, 2026, 13:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.