https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 02:25:16 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-06870 bdu:2026-06870 https://cve.radiocsirt.org/vuln/bdu:2026-06870 https://cve.radiocsirt.org/vuln/bell-cve-2026-32175 <p><strong>Affected:</strong> Alpaquita:25: dotnet8-runtime, Alpaquita:stream: dotnet8-runtime</p> <p><strong>Affected:</strong> Alpaquita:25: dotnet8-runtime, Alpaquita:stream: dotnet8-runtime</p> https://cve.radiocsirt.org/vuln/bell-cve-2026-32175 https://cve.radiocsirt.org/vuln/bit-dotnet-2026-32175 <p><strong>Affected:</strong> Bitnami: dotnet</p> <p>A tampering vulnerability exists when .NET Core improperly handles specially crafted files. An attacker who successfully exploited this vulnerability could write arbitrary files and directories to certain locations on a vulnerable system. However, an attacker would have limited control over the destination of the files and directories. To exploit the vulnerability, an attacker must send a specially crafted file to a vulnerable system. The security update fixes the vulnerability by ensuring .NET Core properly handles files.</p> <p><strong>Affected:</strong> Bitnami: dotnet</p> <p>A tampering vulnerability exists when .NET Core improperly handles specially crafted files. An attacker who successfully exploited this vulnerability could write arbitrary files and directories to certain locations on a vulnerable system. However, an attacker would have limited control over the destination of the files and directories. To exploit the vulnerability, an attacker must send a specially crafted file to a vulnerable system. The security update fixes the vulnerability by ensuring .NET Core properly handles files.</p> https://cve.radiocsirt.org/vuln/bit-dotnet-2026-32175 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0585 certfr-2026-avi-0585 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0585 https://cve.radiocsirt.org/vuln/euvd-2026-350465 EUVD-2026-350465 https://cve.radiocsirt.org/vuln/euvd-2026-350465 https://cve.radiocsirt.org/vuln/fkie_cve-2026-32175 <p>A tampering vulnerability exists when .NET Core improperly handles specially crafted files. An attacker who successfully exploited this vulnerability could write arbitrary files and directories to certain locations on a vulnerable system. However, an attacker would have limited control over the destination of the files and directories. To exploit the vulnerability, an attacker must send a specially crafted file to a vulnerable system. The security update fixes the vulnerability by ensuring .NET Core properly handles files.</p> <p>A tampering vulnerability exists when .NET Core improperly handles specially crafted files. An attacker who successfully exploited this vulnerability could write arbitrary files and directories to certain locations on a vulnerable system. However, an attacker would have limited control over the destination of the files and directories. To exploit the vulnerability, an attacker must send a specially crafted file to a vulnerable system. The security update fixes the vulnerability by ensuring .NET Core properly handles files.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-32175 https://cve.radiocsirt.org/vuln/ghsa-rg75-q538-x34v <p><strong>Affected:</strong> NuGet: Microsoft.NetCore.App.Runtime.win-arm, NuGet: Microsoft.NetCore.App.Runtime.win-arm64, NuGet: Microsoft.NetCore.App.Runtime.win-x64, NuGet: Microsoft.NetCore.App.Runtime.win-x86</p> <p>## Executive Summary:</p> <p>Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 8.0, .NET 9.0, and .NET 10.0. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.</p> <p>A tampering vulnerability exists when .NET Core improperly handles specially crafted files. An attacker who successfully exploited this vulnerability could write arbitrary files and directories to certain locations on a vulnerable system. However, an attacker would have limited control over the destination of the files and directories.</p> <p>To exploit the vulnerability, an attacker must send a specially crafted file to a vulnerable system.</p> <p>The security update fixes the vulnerability by ensuring .NET Core properly handles files.</p> <p>## Announcement</p> <p>Announcement for this issue can be found at https://github.com/dotnet/announcements/issues/396</p> <p>## CVSS Details</p> <p>- **Version:** 3.1 - **Severity:** - **Score:** 4.3 - **Vector:** /AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N - **Weakness:** CWE-36: Absolute Path Traversal</p> <p>## Affected Platforms</p> <p>- **Platforms:** Windows - **Architectures:** All</p> <p>## &lt;a name=&#34;affected-packages&#34;&gt;&lt;/a&gt;Affected Packages The vulnerability affects any Microsoft .NET project if it uses any of affected package versions listed below</p> <p>### &lt;a name=&#34;.NET 10&#34;&gt;&lt;/a&gt;.NET 10 Package name | Affected version | Patched version ------------ | ---------------- | ------------------------- [Microsoft.NetCore.Ap…</p> <p><strong>Affected:</strong> NuGet: Microsoft.NetCore.App.Runtime.win-arm, NuGet: Microsoft.NetCore.App.Runtime.win-arm64, NuGet: Microsoft.NetCore.App.Runtime.win-x64, NuGet: Microsoft.NetCore.App.Runtime.win-x86</p> <p>## Executive Summary:</p> <p>Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 8.0, .NET 9.0, and .NET 10.0. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.</p> <p>A tampering vulnerability exists when .NET Core improperly handles specially crafted files. An attacker who successfully exploited this vulnerability could write arbitrary files and directories to certain locations on a vulnerable system. However, an attacker would have limited control over the destination of the files and directories.</p> <p>To exploit the vulnerability, an attacker must send a specially crafted file to a vulnerable system.</p> <p>The security update fixes the vulnerability by ensuring .NET Core properly handles files.</p> <p>## Announcement</p> <p>Announcement for this issue can be found at https://github.com/dotnet/announcements/issues/396</p> <p>## CVSS Details</p> <p>- **Version:** 3.1 - **Severity:** - **Score:** 4.3 - **Vector:** /AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N - **Weakness:** CWE-36: Absolute Path Traversal</p> <p>## Affected Platforms</p> <p>- **Platforms:** Windows - **Architectures:** All</p> <p>## &lt;a name=&#34;affected-packages&#34;&gt;&lt;/a&gt;Affected Packages The vulnerability affects any Microsoft .NET project if it uses any of affected package versions listed below</p> <p>### &lt;a name=&#34;.NET 10&#34;&gt;&lt;/a&gt;.NET 10 Package name | Affected version | Patched version ------------ | ---------------- | ------------------------- [Microsoft.NetCore.Ap…</p> https://cve.radiocsirt.org/vuln/ghsa-rg75-q538-x34v https://cve.radiocsirt.org/vuln/msrc_cve-2026-32175 msrc_CVE-2026-32175 https://cve.radiocsirt.org/vuln/msrc_cve-2026-32175 https://cve.radiocsirt.org/vuln/ncsc-2026-0143 NCSC-2026-0143 https://cve.radiocsirt.org/vuln/ncsc-2026-0143 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-32175 <p><strong>Affected:</strong> Ubuntu:22.04:LTS: dotnet7</p> <p>A tampering vulnerability exists when .NET Core improperly handles specially crafted files. An attacker who successfully exploited this vulnerability could write arbitrary files and directories to certain locations on a vulnerable system. However, an attacker would have limited control over the destination of the files and directories. To exploit the vulnerability, an attacker must send a specially crafted file to a vulnerable system. The security update fixes the vulnerability by ensuring .NET Core properly handles files.</p> <p><strong>Affected:</strong> Ubuntu:22.04:LTS: dotnet7</p> <p>A tampering vulnerability exists when .NET Core improperly handles specially crafted files. An attacker who successfully exploited this vulnerability could write arbitrary files and directories to certain locations on a vulnerable system. However, an attacker would have limited control over the destination of the files and directories. To exploit the vulnerability, an attacker must send a specially crafted file to a vulnerable system. The security update fixes the vulnerability by ensuring .NET Core properly handles files.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-32175 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1488 <p>Ein Angreifer kann mehrere Schwachstellen in Microsoft Visual Studio, Microsoft Visual Studio Code, Microsoft .NET Framework und Microsoft .NET ausnutzen, um beliebigen Programmcode auszuführen, um Daten zu manipulieren, um seine Privilegien zu erhöhen, um Sicherheitsvorkehrungen zu umgehen, um Informationen offenzulegen, und um einen Denial of Service Angriff durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Microsoft Visual Studio, Microsoft Visual Studio Code, Microsoft .NET Framework und Microsoft .NET ausnutzen, um beliebigen Programmcode auszuführen, um Daten zu manipulieren, um seine Privilegien zu erhöhen, um Sicherheitsvorkehrungen zu umgehen, um Informationen offenzulegen, und um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1488