Most recent entries from all

ALSA-2026:67528 — Important: .NET 9.0 security, bug fix, and enhancement update

Affected: AlmaLinux:10: aspnetcore-runtime-9.0, AlmaLinux:10: aspnetcore-runtime-dbg-9.0, AlmaLinux:10: aspnetcore-targeting-pack-9.0, AlmaLinux:10: dotnet-apphost-pack-9.0, AlmaLinux:10: dotnet-hostfxr-9.0, AlmaLinux:10: dotnet-runtime-9.0, AlmaLinux:10: dotnet-runtime-dbg-9.0, AlmaLinux:10: dotnet-sdk-9.0, AlmaLinux:10: dotnet-sdk-9.0-source-built-artifacts, AlmaLinux:10: dotnet-sdk-aot-9.0 and 4 more

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything.

SDK version: 9.0.121 Runtime version: 9.0.20

Security Fix(es):

* dotnet10.0: dotnet9.0: dotnet8.0: .NET Information Disclosure Vulnerability (CVE-2026-58649) * dotnet10.0: dotnet9.0: .NET Elevation of Privilege Vulnerability (CVE-2026-69806)

Bug Fix(es) and Enhancement(s):

* Update .NET 9.0 to SDK 9.0.121 and Runtime 9.0.20 [almalinux-10.2.z] (JIRA:AlmaLinux-252279)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

BIT-dotnet-2026-69806 — .NET Elevation of Privilege Vulnerability

Affected: Bitnami: dotnet

Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally.

certfr-2026-avi-1146 — De multiples vulnérabilités ont été découvertes dans Microsoft .Net. Certaines d'entre elles permettent à un attaquant…

certfr-2026-avi-1146

EUVD-2026-381960

fkie_cve-2026-69806

Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally.

GHSA-fg32-9f4f-8w3f

Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally.

msrc_CVE-2026-69806 — .NET Elevation of Privilege Vulnerability

msrc_CVE-2026-69806

RHSA-2026:66863 — Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

dotnet10.0: dotnet9.0: dotnet8.0: .NET Information Disclosure Vulnerability dotnet10.0: dotnet9.0: .NET Elevation of Privilege Vulnerability

RHSA-2026:67528 — Red Hat Security Advisory: .NET 9.0 security, bug fix, and enhancement update

dotnet10.0: dotnet9.0: dotnet8.0: .NET Information Disclosure Vulnerability dotnet10.0: dotnet9.0: .NET Elevation of Privilege Vulnerability

RLSA-2026:67528 — Important: .NET 9.0 security, bug fix, and enhancement update

Affected: Rocky Linux:10: dotnet9.0

SDK version: 9.0.121 Runtime version: 9.0.20

Security Fix(es):

* dotnet10.0: dotnet9.0: dotnet8.0: .NET Information Disclosure Vulnerability (CVE-2026-58649)

* dotnet10.0: dotnet9.0: .NET Elevation of Privilege Vulnerability (CVE-2026-69806)

Bug Fix(es) and Enhancement(s):

* Update .NET 9.0 to SDK 9.0.121 and Runtime 9.0.20 [rhel-10.2.z] (JIRA:Rocky Linux-252279)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

UBUNTU-CVE-2026-69806

Affected: Ubuntu:22.04:LTS: dotnet6, Ubuntu:22.04:LTS: dotnet7, Ubuntu:24.04:LTS: dotnet10, Ubuntu:26.04:LTS: dotnet10

Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally.

WID-SEC-W-2026-3242 — Microsoft Entwicklerwerkzeuge: Mehrere Schwachstellen ermöglichen Privilegieneskalation

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in verschiedenen Microsoft Entwicklerwerkzeugen ausnutzen, um seine Privilegien zu erhöhen, um Sicherheitsmechanismen zu umgehen, sowie Informationen zu manipulieren oder offenzulegen.