CVE-2026-96237 — .NET Remote Code Execution Vulnerability

Affected: Microsoft .NET 10.0, Microsoft .NET 8.0, Microsoft .NET 9.0, Microsoft Visual Studio 2022 version 17.14, Microsoft Visual Studio 2026 version 18.10

Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network.

USN-8942-1 — dotnet8, dotnet10, dotnet11 vulnerabilities

Affected: Ubuntu:22.04:LTS: dotnet8, Ubuntu:24.04:LTS: dotnet10, Ubuntu:24.04:LTS: dotnet8, Ubuntu:26.10: dotnet10, Ubuntu:26.10: dotnet11, Ubuntu:26.04:LTS: dotnet10

Multiple security issues were discovered in .NET and this update includes new upstream .NET versions to fix these issues.

.NET 8 has been updated to 8.0.32 in Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. .NET 10 has been updated to 10.0.13 in Ubuntu 24.04 LTS, Ubuntu 26.04 LTS and Ubuntu 26.10. .NET 11 has been updated to 11.0.0~rc2 in Ubuntu 26.10.

In addition to security fixes, the updated packages contain bug fixes, new features, and possibly incompatible changes.

Most recent entries from all

CVE-2026-96237 — .NET Remote Code Execution Vulnerability

USN-8942-1 — dotnet8, dotnet10, dotnet11 vulnerabilities