IP-DB.com
Türkçe English Deutsch Español
Anmelden API-Schlüssel holen
7.8Hoch

CVE-2026-96225.NET Elevation of Privilege Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 11.0 runtime; Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime Veröffentlicht: (vor 21 Tagen)

Beschreibung

Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.

Schwachstellentyp (CWE): CWE-59

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

HerstellerProduktVersionen
Microsoft Microsoft Visual Studio 2022 version 17.14 17.14.0 – < 17.14.42
Microsoft Microsoft Visual Studio 2026 version 18.10 18.10.0 – < 18.10.4
microsoft .net 8.0.0 – < 8.0.32
Microsoft .NET 10.0 runtime 10.0.0 – < 10.0.13
Microsoft .NET 11.0 runtime 11.0.0 – < 11.0.0-rc.2
Microsoft .NET 8.0 runtime 8.0.0 – < 8.0.32
Microsoft .NET 9.0 runtime 9.0.0 – < 9.0.21
microsoft visual studio 2022 17.14.0 – < 17.14.42

Ubuntu-Korrekturen

  • USN-8942-1 .NET vulnerabilities Ubuntu 26.10, 26.04, 24.04, 22.04 · 20.10.2026 · dotnet10, dotnet11, dotnet8

Referenzen und Patches

Neue CVEs im selben Produkt — Ubuntu 22.04 LTS

7.8Hoch
CVE-2026-114148

ASP.NET Core Elevation of Privilege Vulnerability

Microsoft .NET 10.0 installed on Linux; Microsoft .NET 10.0 installed on Mac OS; Microsoft .NET 10.0 installed on Windows; Microsoft .NET 11.0 installed on Linux

Incorrect default permissions in ASP.NET Core allows an authorized attacker to elevate privileges locally.

Ohne Score
CVE-2026-98912

ALSA: seq: oss: Reject reads that cannot fit the next event

Linux Linux

In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: oss: Reject reads that cannot fit the next event snd_seq_oss_read() checks whether the next queued OSS sequencer event fits in the remaining userspace buffer before removing it f…

7.5Hoch
CVE-2026-98911

dpaa2-switch: fix the error path in dpaa2_switch_rx()

Linux Linux

In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: fix the error path in dpaa2_switch_rx() In case of an error in dpaa2_switch_rx(), the dpaa2_switch_free_fd() function is called in order to free the FD. This is incorrect sinc…

Ohne Score
CVE-2026-98907

btrfs: protect sb_write_pointer() with invalidate lock

Linux Linux

In the Linux kernel, the following vulnerability has been resolved: btrfs: protect sb_write_pointer() with invalidate lock sb_write_pointer() reads the super block from the block device page cache using read_cache_page_gfp(). This has the same race with BLK…

Ohne Score
CVE-2026-98902

md/raid5: let stripe batch bm_seq comparison wrap-safe

Linux Linux

In the Linux kernel, the following vulnerability has been resolved: md/raid5: let stripe batch bm_seq comparison wrap-safe Once the 32-bit seq wraps, a newer bm_seq can look smaller than old, so .. covert to wrap-safe calculate way.