CVE-2026-96225 — .NET Elevation of Privilege Vulnerability

Affected: Microsoft .NET 10.0, Microsoft .NET 11.0, Microsoft .NET 8.0, Microsoft .NET 9.0, Microsoft Visual Studio 2022 version 17.14, Microsoft Visual Studio 2026 version 18.10

Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.

USN-8942-1 — dotnet8, dotnet10, dotnet11 vulnerabilities

Affected: Ubuntu:22.04:LTS: dotnet8, Ubuntu:24.04:LTS: dotnet10, Ubuntu:24.04:LTS: dotnet8, Ubuntu:26.10: dotnet10, Ubuntu:26.10: dotnet11, Ubuntu:26.04:LTS: dotnet10

Multiple security issues were discovered in .NET and this update includes new upstream .NET versions to fix these issues.

.NET 8 has been updated to 8.0.32 in Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. .NET 10 has been updated to 10.0.13 in Ubuntu 24.04 LTS, Ubuntu 26.04 LTS and Ubuntu 26.10. .NET 11 has been updated to 11.0.0~rc2 in Ubuntu 26.10.

In addition to security fixes, the updated packages contain bug fixes, new features, and possibly incompatible changes.

Most recent entries from all

CVE-2026-96225 — .NET Elevation of Privilege Vulnerability

USN-8942-1 — dotnet8, dotnet10, dotnet11 vulnerabilities