Most recent entries from all

ALSA-2026:67524 — Moderate: .NET 8.0 security, bug fix, and enhancement update

Affected: AlmaLinux:9: aspnetcore-runtime-8.0, AlmaLinux:9: aspnetcore-runtime-dbg-8.0, AlmaLinux:9: aspnetcore-targeting-pack-8.0, AlmaLinux:9: dotnet-apphost-pack-8.0, AlmaLinux:9: dotnet-hostfxr-8.0, AlmaLinux:9: dotnet-runtime-8.0, AlmaLinux:9: dotnet-runtime-dbg-8.0, AlmaLinux:9: dotnet-sdk-8.0, AlmaLinux:9: dotnet-sdk-8.0-source-built-artifacts, AlmaLinux:9: dotnet-sdk-dbg-8.0 and 2 more

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything.

SDK version: 8.0.131 Runtime version: 8.0.31

Security Fix(es):

* dotnet10.0: dotnet9.0: dotnet8.0: .NET Information Disclosure Vulnerability (CVE-2026-58649)

Bug Fix(es) and Enhancement(s):

* Update .NET 8.0 to SDK 8.0.131 and Runtime 8.0.31 [almalinux-9.8.z] (JIRA:AlmaLinux-252247)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

BELL-CVE-2026-58649

Affected: Alpaquita:25: dotnet8-runtime, Alpaquita:stream: dotnet8-runtime

certfr-2026-avi-1146 — De multiples vulnérabilités ont été découvertes dans Microsoft .Net. Certaines d'entre elles permettent à un attaquant…

certfr-2026-avi-1146

EUVD-2026-381764

fkie_cve-2026-58649

Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.

GHSA-44g5-m8vm-448v

Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.

msrc_CVE-2026-58649 — .NET Information Disclosure Vulnerability

msrc_CVE-2026-58649

NCSC-2026-0351 — Kwetsbaarheden verholpen in Microsoft Developer Tools

NCSC-2026-0351

RHSA-2026:66863 — Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

dotnet10.0: dotnet9.0: dotnet8.0: .NET Information Disclosure Vulnerability dotnet10.0: dotnet9.0: .NET Elevation of Privilege Vulnerability

RHSA-2026:67524 — Red Hat Security Advisory: .NET 8.0 security, bug fix, and enhancement update

dotnet10.0: dotnet9.0: dotnet8.0: .NET Information Disclosure Vulnerability

RLSA-2026:67524 — Moderate: .NET 8.0 security, bug fix, and enhancement update

Affected: Rocky Linux:9: dotnet8.0

SDK version: 8.0.131 Runtime version: 8.0.31

Security Fix(es):

* dotnet10.0: dotnet9.0: dotnet8.0: .NET Information Disclosure Vulnerability (CVE-2026-58649)

Bug Fix(es) and Enhancement(s):

* Update .NET 8.0 to SDK 8.0.131 and Runtime 8.0.31 [rhel-9.8.z] (JIRA:Rocky Linux-252247)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

UBUNTU-CVE-2026-58649

Affected: Ubuntu:22.04:LTS: dotnet6, Ubuntu:22.04:LTS: dotnet7, Ubuntu:22.04:LTS: dotnet8, Ubuntu:24.04:LTS: dotnet10, Ubuntu:24.04:LTS: dotnet8, Ubuntu:26.04:LTS: dotnet10

Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.

WID-SEC-W-2026-3242 — Microsoft Entwicklerwerkzeuge: Mehrere Schwachstellen ermöglichen Privilegieneskalation

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in verschiedenen Microsoft Entwicklerwerkzeugen ausnutzen, um seine Privilegien zu erhöhen, um Sicherheitsmechanismen zu umgehen, sowie Informationen zu manipulieren oder offenzulegen.