Most recent entries from all

bdu:2026-06599

BELL-CVE-2026-35433

Affected: Alpaquita:25: dotnet8-runtime, Alpaquita:stream: dotnet8-runtime

BIT-dotnet-2026-35433 — .NET Elevation of Privilege Vulnerability

Affected: Bitnami: dotnet

Improper input validation in .NET allows an unauthorized attacker to elevate privileges locally.

certfr-2026-avi-0585 — De multiples vulnérabilités ont été découvertes dans Microsoft Windows. Certaines d'entre elles permettent à un attaqua…

certfr-2026-avi-0585

EUVD-2026-350569

fkie_cve-2026-35433

Improper input validation in .NET allows an unauthorized attacker to elevate privileges locally.

GHSA-8x9c-mqxv-q2pp — Microsoft Security Advisory CVE-2026-35433 – .NET Elevation of Privilege Vulnerability

Affected: NuGet: Microsoft.WindowsDesktop.App.Runtime.win-arm64, NuGet: Microsoft.WindowsDesktop.App.Runtime.win-x64, NuGet: Microsoft.WindowsDesktop.App.Runtime.win-x86

## Executive Summary:

Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 8.0, .NET 9.0, and .NET 10.0. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.

Improper input validation in .NET allows an unauthorized attacker to elevate privileges locally.

## Announcement

Announcement for this issue can be found at https://github.com/dotnet/announcements/issues/398

## CVSS Details

- **Version:** 3.1 - **Severity:** High - **Score:** 7.3 - **Vector:** AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L/E:U/RL:O/RC:C - **Weakness:** CWE-122: Heap-based Buffer Overflow, CWE-20: Improper Input Validation

## Affected Platforms

- **Platforms:** Windows - **Architectures:** All

## <a name="affected-packages"></a>Affected Packages The vulnerability affects any Microsoft .NET project if it uses any of affected package versions listed below

### <a name=".NET 10"></a>.NET 10 Package name | Affected version | Patched version ------------ | ---------------- | ------------------------- [Microsoft.WindowsDesktop.App.Runtime.win-arm64](https://www.nuget.org/packages/Microsoft.WindowsDesktop.App.Runtime.win-arm64) | >= 10.0.0, <= 10.0.7 | 10.0.8 [Microsoft.WindowsDesktop.App.Runtime.win-x64](https://www.nuget.org/packages/Microsoft.WindowsDesktop.App.Runtime.win-x64) | >= 10.0.0, <= 10.0.7 | 10.0.8 [Microsoft.WindowsDesktop.App.Runtime.win-x86](https:/…

msrc_CVE-2026-35433 — .NET Elevation of Privilege Vulnerability

msrc_CVE-2026-35433

NCSC-2026-0143 — Kwetsbaarheden verholpen in Microsoft Developer Tools

NCSC-2026-0143

UBUNTU-CVE-2026-35433

Affected: Ubuntu:22.04:LTS: dotnet7

Improper input validation in .NET allows an unauthorized attacker to elevate privileges locally.

WID-SEC-W-2026-1488 — Microsoft Developer Tools: Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in Microsoft Visual Studio, Microsoft Visual Studio Code, Microsoft .NET Framework und Microsoft .NET ausnutzen, um beliebigen Programmcode auszuführen, um Daten zu manipulieren, um seine Privilegien zu erhöhen, um Sicherheitsvorkehrungen zu umgehen, um Informationen offenzulegen, und um einen Denial of Service Angriff durchzuführen.