CVE-2026-70175 — ASP.NET Core Elevation of Privilege Vulnerability

Affected: Microsoft ASP.NET Core 10.0, Microsoft ASP.NET Core 8.0, Microsoft ASP.NET Core 9.0, Microsoft Visual Studio 2022 version 17.14, Microsoft Visual Studio 2026 version 18.10

Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.

USN-8942-1 — dotnet8, dotnet10, dotnet11 vulnerabilities

Affected: Ubuntu:22.04:LTS: dotnet8, Ubuntu:24.04:LTS: dotnet10, Ubuntu:24.04:LTS: dotnet8, Ubuntu:26.10: dotnet10, Ubuntu:26.10: dotnet11, Ubuntu:26.04:LTS: dotnet10

Multiple security issues were discovered in .NET and this update includes new upstream .NET versions to fix these issues.

.NET 8 has been updated to 8.0.32 in Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. .NET 10 has been updated to 10.0.13 in Ubuntu 24.04 LTS, Ubuntu 26.04 LTS and Ubuntu 26.10. .NET 11 has been updated to 11.0.0~rc2 in Ubuntu 26.10.

In addition to security fixes, the updated packages contain bug fixes, new features, and possibly incompatible changes.

Most recent entries from all

CVE-2026-70175 — ASP.NET Core Elevation of Privilege Vulnerability

USN-8942-1 — dotnet8, dotnet10, dotnet11 vulnerabilities