https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-02T07:29:26.783918+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-114148 CVE-2026-114148 — ASP.NET Core Elevation of Privilege Vulnerability 2026-11-02T07:29:26.785515+00:00

Affected: Microsoft .NET 10.0 installed on Linux, Microsoft .NET 10.0 installed on Mac OS, Microsoft .NET 10.0 installed on Windows, Microsoft .NET 11.0 installed on Linux, Microsoft .NET 11.0 installed on Mac OS, Microsoft .NET 11.0 installed on Windows, Microsoft .NET 8.0 installed on Linux, Microsoft .NET 8.0 installed on Mac OS, Microsoft .NET 8.0 installed on Windows, Microsoft .NET 9.0 installed on Linux and 4 more

Incorrect default permissions in ASP.NET Core allows an authorized attacker to elevate privileges locally.

 https://db.gcve.eu/vuln/usn-8958-1 USN-8958-1 — dotnet8, dotnet10, dotnet11 vulnerabilities 2026-11-02T07:29:26.785600+00:00

Affected: Ubuntu:22.04:LTS: dotnet8, Ubuntu:24.04:LTS: dotnet10, Ubuntu:24.04:LTS: dotnet8, Ubuntu:26.10: dotnet10, Ubuntu:26.10: dotnet11, Ubuntu:26.04:LTS: dotnet10

It was discovered that the .NET Blazor WebAssembly debug proxy did not properly escape certain values. An attacker could possibly use this issue to execute arbitrary code. The fix for this CVE was originally released via USN-8942-1, but it was found to be incomplete. This issue only affected dotnet10 and dotnet11. (CVE-2026-102870)

It was discovered that the Brotli decompression library used by .NET incorrectly handled certain compressed streams. A remote attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2026-111497)

Alen Cheung discovered that .NET did not properly handle file ownership in certain circumstances. An attacker could possibly use this issue to elevate local privileges. (CVE-2026-114148)