https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T14:42:25.341420+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-06599 bdu:2026-06599 2026-10-03T14:42:25.351671+00:00 bdu:2026-06599 https://cve.radiocsirt.org/vuln/bell-cve-2026-35433 BELL-CVE-2026-35433 2026-10-03T14:42:25.351704+00:00

Affected: Alpaquita:25: dotnet8-runtime, Alpaquita:stream: dotnet8-runtime

 https://cve.radiocsirt.org/vuln/bit-dotnet-2026-35433 BIT-dotnet-2026-35433 — .NET Elevation of Privilege Vulnerability 2026-10-03T14:42:25.351732+00:00

Affected: Bitnami: dotnet

Improper input validation in .NET allows an unauthorized attacker to elevate privileges locally.

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0585 certfr-2026-avi-0585 — De multiples vulnérabilités ont été découvertes dans Microsoft Windows. Certaines d'entre elles permettent à un attaqua… 2026-10-03T14:42:25.351755+00:00 certfr-2026-avi-0585 https://cve.radiocsirt.org/vuln/euvd-2026-350569 EUVD-2026-350569 2026-10-03T14:42:25.351771+00:00 EUVD-2026-350569 https://cve.radiocsirt.org/vuln/fkie_cve-2026-35433 fkie_cve-2026-35433 2026-10-03T14:42:25.351781+00:00

Improper input validation in .NET allows an unauthorized attacker to elevate privileges locally.

 https://cve.radiocsirt.org/vuln/ghsa-8x9c-mqxv-q2pp GHSA-8x9c-mqxv-q2pp — Microsoft Security Advisory CVE-2026-35433 – .NET Elevation of Privilege Vulnerability 2026-10-03T14:42:25.351800+00:00

Affected: NuGet: Microsoft.WindowsDesktop.App.Runtime.win-arm64, NuGet: Microsoft.WindowsDesktop.App.Runtime.win-x64, NuGet: Microsoft.WindowsDesktop.App.Runtime.win-x86

## Executive Summary:

Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 8.0, .NET 9.0, and .NET 10.0. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.

Improper input validation in .NET allows an unauthorized attacker to elevate privileges locally.

## Announcement

Announcement for this issue can be found at https://github.com/dotnet/announcements/issues/398

## CVSS Details

- **Version:** 3.1 - **Severity:** High - **Score:** 7.3 - **Vector:** AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L/E:U/RL:O/RC:C - **Weakness:** CWE-122: Heap-based Buffer Overflow, CWE-20: Improper Input Validation

## Affected Platforms

- **Platforms:** Windows - **Architectures:** All

## <a name="affected-packages"></a>Affected Packages The vulnerability affects any Microsoft .NET project if it uses any of affected package versions listed below

### <a name=".NET 10"></a>.NET 10 Package name | Affected version | Patched version ------------ | ---------------- | ------------------------- [Microsoft.WindowsDesktop.App.Runtime.win-arm64](https://www.nuget.org/packages/Microsoft.WindowsDesktop.App.Runtime.win-arm64) | >= 10.0.0, <= 10.0.7 | 10.0.8 [Microsoft.WindowsDesktop.App.Runtime.win-x64](https://www.nuget.org/packages/Microsoft.WindowsDesktop.App.Runtime.win-x64) | >= 10.0.0, <= 10.0.7 | 10.0.8 [Microsoft.WindowsDesktop.App.Runtime.win-x86](https:/…

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-35433 msrc_CVE-2026-35433 — .NET Elevation of Privilege Vulnerability 2026-10-03T14:42:25.351864+00:00 msrc_CVE-2026-35433 https://cve.radiocsirt.org/vuln/ncsc-2026-0143 NCSC-2026-0143 — Kwetsbaarheden verholpen in Microsoft Developer Tools 2026-10-03T14:42:25.351881+00:00 NCSC-2026-0143 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-35433 UBUNTU-CVE-2026-35433 2026-10-03T14:42:25.351902+00:00

Affected: Ubuntu:22.04:LTS: dotnet7

Improper input validation in .NET allows an unauthorized attacker to elevate privileges locally.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1488 WID-SEC-W-2026-1488 — Microsoft Developer Tools: Mehrere Schwachstellen 2026-10-03T14:42:25.351919+00:00

Ein Angreifer kann mehrere Schwachstellen in Microsoft Visual Studio, Microsoft Visual Studio Code, Microsoft .NET Framework und Microsoft .NET ausnutzen, um beliebigen Programmcode auszuführen, um Daten zu manipulieren, um seine Privilegien zu erhöhen, um Sicherheitsvorkehrungen zu umgehen, um Informationen offenzulegen, und um einen Denial of Service Angriff durchzuführen.