RHSA-2026:91709
Vulnerability from csaf_redhat - Published: 2026-10-28 13:10 - Updated: 2026-11-02 03:38Summary
Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
Severity
Important
Notes
Topic: An update for Red Hat Hardened Images RPMs is now available.
Details: This update includes the following RPMs:
dotnet8.0:
* aspnetcore-runtime-8.0-8.0.33-0.1.hum1 (aarch64, x86_64)
* aspnetcore-runtime-dbg-8.0-8.0.33-0.1.hum1 (aarch64, x86_64)
* aspnetcore-targeting-pack-8.0-8.0.33-0.1.hum1 (aarch64, x86_64)
* dotnet-apphost-pack-8.0-8.0.33-0.1.hum1 (aarch64, x86_64)
* dotnet-hostfxr-8.0-8.0.33-0.1.hum1 (aarch64, x86_64)
* dotnet-runtime-8.0-8.0.33-0.1.hum1 (aarch64, x86_64)
* dotnet-runtime-dbg-8.0-8.0.33-0.1.hum1 (aarch64, x86_64)
* dotnet-sdk-8.0-8.0.133-0.1.hum1 (aarch64, x86_64)
* dotnet-sdk-8.0-source-built-artifacts-8.0.133-0.1.hum1 (aarch64, x86_64)
* dotnet-sdk-dbg-8.0-8.0.133-0.1.hum1 (aarch64, x86_64)
* dotnet-targeting-pack-8.0-8.0.33-0.1.hum1 (aarch64, x86_64)
* dotnet-templates-8.0-8.0.133-0.1.hum1 (aarch64, x86_64)
* dotnet8.0-8.0.133-0.1.hum1.src (src)
Security Fix(es):
dotnet8.0:
* CVE-2026-111497
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the Google Brotli decoder. An out-of-bounds write in the block-type switch handling in c/dec/decode.c can be triggered by a crafted Brotli-compressed stream. When an application decompresses untrusted Brotli data, this can lead to memory disclosure, denial of service, or potentially arbitrary code execution.
8.1 (High)
Affected products
Fixed
25 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.33-0.1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.33-0.1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.33-0.1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.33-0.1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.33-0.1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.33-0.1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.33-0.1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.33-0.1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.33-0.1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.33-0.1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.33-0.1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.33-0.1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.33-0.1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.33-0.1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.133-0.1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.133-0.1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.133-0.1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.133-0.1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.133-0.1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.133-0.1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.33-0.1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.33-0.1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.133-0.1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.133-0.1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:dotnet8.0-0:8.0.133-0.1.hum1@src | — |
Vendor Fix
fix
Workaround
|
Threats
Exploit Status
CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog
Impact
Important
Incorrect default permissions in ASP.NET Core allows an authorized attacker to elevate privileges locally. What privileges could be gained by an attacker who successfully exploited this vulnerability? An attacker who successfully exploited this vulnerability could gain the highest privileges on the system.
CWE-276 - Incorrect Default PermissionsAffected products
Fixed
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.133-0.1.hum1@aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.133-0.1.hum1@x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.133-0.1.hum1@aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.133-0.1.hum1@x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.133-0.1.hum1@aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.133-0.1.hum1@x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.133-0.1.hum1@aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.133-0.1.hum1@x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:dotnet8.0-0:8.0.133-0.1.hum1@src | — |
Vendor Fix
fix
|
Known not affected
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.33-0.1.hum1@aarch64 | — | ||
| Unresolved product id: Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.33-0.1.hum1@x86_64 | — | ||
| Unresolved product id: Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.33-0.1.hum1@aarch64 | — | ||
| Unresolved product id: Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.33-0.1.hum1@x86_64 | — | ||
| Unresolved product id: Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.33-0.1.hum1@aarch64 | — | ||
| Unresolved product id: Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.33-0.1.hum1@x86_64 | — | ||
| Unresolved product id: Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.33-0.1.hum1@aarch64 | — | ||
| Unresolved product id: Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.33-0.1.hum1@x86_64 | — | ||
| Unresolved product id: Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.33-0.1.hum1@aarch64 | — | ||
| Unresolved product id: Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.33-0.1.hum1@x86_64 | — | ||
| Unresolved product id: Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.33-0.1.hum1@aarch64 | — | ||
| Unresolved product id: Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.33-0.1.hum1@x86_64 | — | ||
| Unresolved product id: Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.33-0.1.hum1@aarch64 | — | ||
| Unresolved product id: Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.33-0.1.hum1@x86_64 | — | ||
| Unresolved product id: Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.33-0.1.hum1@aarch64 | — | ||
| Unresolved product id: Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.33-0.1.hum1@x86_64 | — |
Threats
Impact
Important
References
17 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for Red Hat Hardened Images RPMs is now available.",
"title": "Topic"
},
{
"category": "general",
"text": "This update includes the following RPMs:\n\ndotnet8.0:\n * aspnetcore-runtime-8.0-8.0.33-0.1.hum1 (aarch64, x86_64)\n * aspnetcore-runtime-dbg-8.0-8.0.33-0.1.hum1 (aarch64, x86_64)\n * aspnetcore-targeting-pack-8.0-8.0.33-0.1.hum1 (aarch64, x86_64)\n * dotnet-apphost-pack-8.0-8.0.33-0.1.hum1 (aarch64, x86_64)\n * dotnet-hostfxr-8.0-8.0.33-0.1.hum1 (aarch64, x86_64)\n * dotnet-runtime-8.0-8.0.33-0.1.hum1 (aarch64, x86_64)\n * dotnet-runtime-dbg-8.0-8.0.33-0.1.hum1 (aarch64, x86_64)\n * dotnet-sdk-8.0-8.0.133-0.1.hum1 (aarch64, x86_64)\n * dotnet-sdk-8.0-source-built-artifacts-8.0.133-0.1.hum1 (aarch64, x86_64)\n * dotnet-sdk-dbg-8.0-8.0.133-0.1.hum1 (aarch64, x86_64)\n * dotnet-targeting-pack-8.0-8.0.33-0.1.hum1 (aarch64, x86_64)\n * dotnet-templates-8.0-8.0.133-0.1.hum1 (aarch64, x86_64)\n * dotnet8.0-8.0.133-0.1.hum1.src (src)\n\nSecurity Fix(es):\n\ndotnet8.0:\n * CVE-2026-111497",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:91709",
"url": "https://access.redhat.com/errata/RHSA-2026:91709"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-111497",
"url": "https://access.redhat.com/security/cve/CVE-2026-111497"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://images.redhat.com/",
"url": "https://images.redhat.com/"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-114148",
"url": "https://access.redhat.com/security/cve/CVE-2026-114148"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_91709.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
"tracking": {
"current_release_date": "2026-11-02T03:38:50+00:00",
"generator": {
"date": "2026-11-02T03:38:50+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.4.4"
}
},
"id": "RHSA-2026:91709",
"initial_release_date": "2026-10-28T13:10:31+00:00",
"revision_history": [
{
"date": "2026-10-28T13:10:31+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-10-29T15:01:29+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-11-02T03:38:50+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Hardened Images",
"product": {
"name": "Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:hummingbird:1"
}
}
}
],
"category": "product_family",
"name": "Red Hat Hardened Images"
},
{
"branches": [
{
"category": "product_version",
"name": "aspnetcore-runtime-8.0-0:8.0.33-0.1.hum1@aarch64",
"product": {
"name": "aspnetcore-runtime-8.0-0:8.0.33-0.1.hum1@aarch64",
"product_id": "aspnetcore-runtime-8.0-0:8.0.33-0.1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-8.0@8.0.33-0.1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-runtime-dbg-8.0-0:8.0.33-0.1.hum1@aarch64",
"product": {
"name": "aspnetcore-runtime-dbg-8.0-0:8.0.33-0.1.hum1@aarch64",
"product_id": "aspnetcore-runtime-dbg-8.0-0:8.0.33-0.1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-dbg-8.0@8.0.33-0.1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-targeting-pack-8.0-0:8.0.33-0.1.hum1@aarch64",
"product": {
"name": "aspnetcore-targeting-pack-8.0-0:8.0.33-0.1.hum1@aarch64",
"product_id": "aspnetcore-targeting-pack-8.0-0:8.0.33-0.1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-8.0@8.0.33-0.1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-8.0-0:8.0.33-0.1.hum1@aarch64",
"product": {
"name": "dotnet-apphost-pack-8.0-0:8.0.33-0.1.hum1@aarch64",
"product_id": "dotnet-apphost-pack-8.0-0:8.0.33-0.1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-8.0@8.0.33-0.1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-8.0-0:8.0.33-0.1.hum1@aarch64",
"product": {
"name": "dotnet-hostfxr-8.0-0:8.0.33-0.1.hum1@aarch64",
"product_id": "dotnet-hostfxr-8.0-0:8.0.33-0.1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-8.0@8.0.33-0.1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-8.0-0:8.0.33-0.1.hum1@aarch64",
"product": {
"name": "dotnet-runtime-8.0-0:8.0.33-0.1.hum1@aarch64",
"product_id": "dotnet-runtime-8.0-0:8.0.33-0.1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-8.0@8.0.33-0.1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-dbg-8.0-0:8.0.33-0.1.hum1@aarch64",
"product": {
"name": "dotnet-runtime-dbg-8.0-0:8.0.33-0.1.hum1@aarch64",
"product_id": "dotnet-runtime-dbg-8.0-0:8.0.33-0.1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-dbg-8.0@8.0.33-0.1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-8.0-0:8.0.133-0.1.hum1@aarch64",
"product": {
"name": "dotnet-sdk-8.0-0:8.0.133-0.1.hum1@aarch64",
"product_id": "dotnet-sdk-8.0-0:8.0.133-0.1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-8.0@8.0.133-0.1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.133-0.1.hum1@aarch64",
"product": {
"name": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.133-0.1.hum1@aarch64",
"product_id": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.133-0.1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-8.0-source-built-artifacts@8.0.133-0.1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-dbg-8.0-0:8.0.133-0.1.hum1@aarch64",
"product": {
"name": "dotnet-sdk-dbg-8.0-0:8.0.133-0.1.hum1@aarch64",
"product_id": "dotnet-sdk-dbg-8.0-0:8.0.133-0.1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-dbg-8.0@8.0.133-0.1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "dotnet-targeting-pack-8.0-0:8.0.33-0.1.hum1@aarch64",
"product": {
"name": "dotnet-targeting-pack-8.0-0:8.0.33-0.1.hum1@aarch64",
"product_id": "dotnet-targeting-pack-8.0-0:8.0.33-0.1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-targeting-pack-8.0@8.0.33-0.1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "dotnet-templates-8.0-0:8.0.133-0.1.hum1@aarch64",
"product": {
"name": "dotnet-templates-8.0-0:8.0.133-0.1.hum1@aarch64",
"product_id": "dotnet-templates-8.0-0:8.0.133-0.1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-templates-8.0@8.0.133-0.1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "aspnetcore-runtime-8.0-0:8.0.33-0.1.hum1@x86_64",
"product": {
"name": "aspnetcore-runtime-8.0-0:8.0.33-0.1.hum1@x86_64",
"product_id": "aspnetcore-runtime-8.0-0:8.0.33-0.1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-8.0@8.0.33-0.1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-runtime-dbg-8.0-0:8.0.33-0.1.hum1@x86_64",
"product": {
"name": "aspnetcore-runtime-dbg-8.0-0:8.0.33-0.1.hum1@x86_64",
"product_id": "aspnetcore-runtime-dbg-8.0-0:8.0.33-0.1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-dbg-8.0@8.0.33-0.1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-targeting-pack-8.0-0:8.0.33-0.1.hum1@x86_64",
"product": {
"name": "aspnetcore-targeting-pack-8.0-0:8.0.33-0.1.hum1@x86_64",
"product_id": "aspnetcore-targeting-pack-8.0-0:8.0.33-0.1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-8.0@8.0.33-0.1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-8.0-0:8.0.33-0.1.hum1@x86_64",
"product": {
"name": "dotnet-apphost-pack-8.0-0:8.0.33-0.1.hum1@x86_64",
"product_id": "dotnet-apphost-pack-8.0-0:8.0.33-0.1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-8.0@8.0.33-0.1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-8.0-0:8.0.33-0.1.hum1@x86_64",
"product": {
"name": "dotnet-hostfxr-8.0-0:8.0.33-0.1.hum1@x86_64",
"product_id": "dotnet-hostfxr-8.0-0:8.0.33-0.1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-8.0@8.0.33-0.1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-8.0-0:8.0.33-0.1.hum1@x86_64",
"product": {
"name": "dotnet-runtime-8.0-0:8.0.33-0.1.hum1@x86_64",
"product_id": "dotnet-runtime-8.0-0:8.0.33-0.1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-8.0@8.0.33-0.1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-dbg-8.0-0:8.0.33-0.1.hum1@x86_64",
"product": {
"name": "dotnet-runtime-dbg-8.0-0:8.0.33-0.1.hum1@x86_64",
"product_id": "dotnet-runtime-dbg-8.0-0:8.0.33-0.1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-dbg-8.0@8.0.33-0.1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-8.0-0:8.0.133-0.1.hum1@x86_64",
"product": {
"name": "dotnet-sdk-8.0-0:8.0.133-0.1.hum1@x86_64",
"product_id": "dotnet-sdk-8.0-0:8.0.133-0.1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-8.0@8.0.133-0.1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.133-0.1.hum1@x86_64",
"product": {
"name": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.133-0.1.hum1@x86_64",
"product_id": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.133-0.1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-8.0-source-built-artifacts@8.0.133-0.1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-dbg-8.0-0:8.0.133-0.1.hum1@x86_64",
"product": {
"name": "dotnet-sdk-dbg-8.0-0:8.0.133-0.1.hum1@x86_64",
"product_id": "dotnet-sdk-dbg-8.0-0:8.0.133-0.1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-dbg-8.0@8.0.133-0.1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "dotnet-targeting-pack-8.0-0:8.0.33-0.1.hum1@x86_64",
"product": {
"name": "dotnet-targeting-pack-8.0-0:8.0.33-0.1.hum1@x86_64",
"product_id": "dotnet-targeting-pack-8.0-0:8.0.33-0.1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-targeting-pack-8.0@8.0.33-0.1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "dotnet-templates-8.0-0:8.0.133-0.1.hum1@x86_64",
"product": {
"name": "dotnet-templates-8.0-0:8.0.133-0.1.hum1@x86_64",
"product_id": "dotnet-templates-8.0-0:8.0.133-0.1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-templates-8.0@8.0.133-0.1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "dotnet8.0-0:8.0.133-0.1.hum1@src",
"product": {
"name": "dotnet8.0-0:8.0.133-0.1.hum1@src",
"product_id": "dotnet8.0-0:8.0.133-0.1.hum1@src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet8.0@8.0.133-0.1.hum1?arch=src\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-source-rpms"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-8.0-0:8.0.33-0.1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.33-0.1.hum1@aarch64"
},
"product_reference": "aspnetcore-runtime-8.0-0:8.0.33-0.1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-8.0-0:8.0.33-0.1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.33-0.1.hum1@x86_64"
},
"product_reference": "aspnetcore-runtime-8.0-0:8.0.33-0.1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-dbg-8.0-0:8.0.33-0.1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.33-0.1.hum1@aarch64"
},
"product_reference": "aspnetcore-runtime-dbg-8.0-0:8.0.33-0.1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-dbg-8.0-0:8.0.33-0.1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.33-0.1.hum1@x86_64"
},
"product_reference": "aspnetcore-runtime-dbg-8.0-0:8.0.33-0.1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-targeting-pack-8.0-0:8.0.33-0.1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.33-0.1.hum1@aarch64"
},
"product_reference": "aspnetcore-targeting-pack-8.0-0:8.0.33-0.1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-targeting-pack-8.0-0:8.0.33-0.1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.33-0.1.hum1@x86_64"
},
"product_reference": "aspnetcore-targeting-pack-8.0-0:8.0.33-0.1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-8.0-0:8.0.33-0.1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.33-0.1.hum1@aarch64"
},
"product_reference": "dotnet-apphost-pack-8.0-0:8.0.33-0.1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-8.0-0:8.0.33-0.1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.33-0.1.hum1@x86_64"
},
"product_reference": "dotnet-apphost-pack-8.0-0:8.0.33-0.1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-8.0-0:8.0.33-0.1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.33-0.1.hum1@aarch64"
},
"product_reference": "dotnet-hostfxr-8.0-0:8.0.33-0.1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-8.0-0:8.0.33-0.1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.33-0.1.hum1@x86_64"
},
"product_reference": "dotnet-hostfxr-8.0-0:8.0.33-0.1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-8.0-0:8.0.33-0.1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.33-0.1.hum1@aarch64"
},
"product_reference": "dotnet-runtime-8.0-0:8.0.33-0.1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-8.0-0:8.0.33-0.1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.33-0.1.hum1@x86_64"
},
"product_reference": "dotnet-runtime-8.0-0:8.0.33-0.1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-dbg-8.0-0:8.0.33-0.1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.33-0.1.hum1@aarch64"
},
"product_reference": "dotnet-runtime-dbg-8.0-0:8.0.33-0.1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-dbg-8.0-0:8.0.33-0.1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.33-0.1.hum1@x86_64"
},
"product_reference": "dotnet-runtime-dbg-8.0-0:8.0.33-0.1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-8.0-0:8.0.133-0.1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.133-0.1.hum1@aarch64"
},
"product_reference": "dotnet-sdk-8.0-0:8.0.133-0.1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-8.0-0:8.0.133-0.1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.133-0.1.hum1@x86_64"
},
"product_reference": "dotnet-sdk-8.0-0:8.0.133-0.1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.133-0.1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.133-0.1.hum1@aarch64"
},
"product_reference": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.133-0.1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.133-0.1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.133-0.1.hum1@x86_64"
},
"product_reference": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.133-0.1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-dbg-8.0-0:8.0.133-0.1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.133-0.1.hum1@aarch64"
},
"product_reference": "dotnet-sdk-dbg-8.0-0:8.0.133-0.1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-dbg-8.0-0:8.0.133-0.1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.133-0.1.hum1@x86_64"
},
"product_reference": "dotnet-sdk-dbg-8.0-0:8.0.133-0.1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-targeting-pack-8.0-0:8.0.33-0.1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.33-0.1.hum1@aarch64"
},
"product_reference": "dotnet-targeting-pack-8.0-0:8.0.33-0.1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-targeting-pack-8.0-0:8.0.33-0.1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.33-0.1.hum1@x86_64"
},
"product_reference": "dotnet-targeting-pack-8.0-0:8.0.33-0.1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-templates-8.0-0:8.0.133-0.1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.133-0.1.hum1@aarch64"
},
"product_reference": "dotnet-templates-8.0-0:8.0.133-0.1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-templates-8.0-0:8.0.133-0.1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.133-0.1.hum1@x86_64"
},
"product_reference": "dotnet-templates-8.0-0:8.0.133-0.1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet8.0-0:8.0.133-0.1.hum1@src as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:dotnet8.0-0:8.0.133-0.1.hum1@src"
},
"product_reference": "dotnet8.0-0:8.0.133-0.1.hum1@src",
"relates_to_product_reference": "Red Hat Hardened Images"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-111497",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2026-10-22T13:42:58.596140+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2558973"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Google Brotli decoder. An out-of-bounds write in the block-type switch handling in c/dec/decode.c can be triggered by a crafted Brotli-compressed stream. When an application decompresses untrusted Brotli data, this can lead to memory disclosure, denial of service, or potentially arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "brotli: Out-of-Bounds Write in Google Brotli Decoder",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue is rated Important. Exploitation requires that the target decompress attacker-controlled Brotli data (for example HTTP content negotiated with Content-Encoding: br, or APIs such as Node.js zlib / fetch() that decode Brotli). The vulnerable path is reached with a malformed stream rather than typical well-formed encoder output, and there is no public, reliable remote code execution proof-of-concept. Red Hat Enterprise Linux compiler and runtime hardenings - including Address Space Layout Randomization (ASLR), Non-eXecutable (NX) memory, FORTIFY_SOURCE, and SELinux - increase the difficulty of turning this memory corruption into reliable code execution, though they do not eliminate crashes or all impact. Combined with the Attack Requirements noted by the CNA (CVSS v4 AT:P), Red Hat scores Attack Complexity as High and rates the flaw Important rather than Critical.\n\n---\n\nThe Node.js packages in Red Hat Enterprise Linux use either system version of brotli or bundled version. Some Node.js versions are marked \"Not affected\" because they utilize system brotli. For these versions, the Node.js package itself does not require updating. However, customers must still update the system brotli/libbrotli package to address the vulnerability for these Node.js installations.\n\nFollowing is the overview of Node.js versions use system or bundled version.\n\n- Node.js 22 in Red Hat Enterprise Linux 8 and 9, provided via nodejs:22 module, uses system brotli.\n- Node.js 24 in Red Hat Enterprise Linux 8 and 9, provided via nodejs:24 modules, use bundled brotli.\n- Node.js 22 and 24 in Red Hat Enterprise Linux 10, provided via nodejs22 and nodejs24 use system brotli.\n\n---\n\nThe .NET packages in Red Hat Enterprise Linux may either use system version of brotli or bundled version. Following is the overview of .NET versions use system or bundled version.\n\n- .NET 8.0 in Red Hat Enterprise Linux 8, 9, and 10, provided via dotnet8.0 packages, use bundled brotli.\n- .NET 9.0, 10.0, and 11.0 in Red Hat Enterprise Linux 8, 9, and 10, provided via dotnet9.0, dotnet10.0, and dotnet11.0 packages, use system brotli.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.33-0.1.hum1@aarch64",
"Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.33-0.1.hum1@x86_64",
"Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.33-0.1.hum1@aarch64",
"Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.33-0.1.hum1@x86_64",
"Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.33-0.1.hum1@aarch64",
"Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.33-0.1.hum1@x86_64",
"Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.33-0.1.hum1@aarch64",
"Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.33-0.1.hum1@x86_64",
"Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.33-0.1.hum1@aarch64",
"Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.33-0.1.hum1@x86_64",
"Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.33-0.1.hum1@aarch64",
"Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.33-0.1.hum1@x86_64",
"Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.33-0.1.hum1@aarch64",
"Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.33-0.1.hum1@x86_64",
"Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.133-0.1.hum1@aarch64",
"Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.133-0.1.hum1@x86_64",
"Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.133-0.1.hum1@aarch64",
"Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.133-0.1.hum1@x86_64",
"Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.133-0.1.hum1@aarch64",
"Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.133-0.1.hum1@x86_64",
"Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.33-0.1.hum1@aarch64",
"Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.33-0.1.hum1@x86_64",
"Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.133-0.1.hum1@aarch64",
"Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.133-0.1.hum1@x86_64",
"Red Hat Hardened Images:dotnet8.0-0:8.0.133-0.1.hum1@src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-111497"
},
{
"category": "external",
"summary": "RHBZ#2558973",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2558973"
},
{
"category": "external",
"summary": "RHSB-2026-015",
"url": "https://access.redhat.com/security/vulnerabilities/RHSB-2026-015"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-111497",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-111497"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-111497",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-111497"
},
{
"category": "external",
"summary": "https://nodejs.org/en/blog/vulnerability/october-2026-security-releases#nodejs-brotli-decoder-out-of-bounds-write-permits-remote-code-execution-cve-2026-111497---high",
"url": "https://nodejs.org/en/blog/vulnerability/october-2026-security-releases#nodejs-brotli-decoder-out-of-bounds-write-permits-remote-code-execution-cve-2026-111497---high"
},
{
"category": "external",
"summary": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
}
],
"release_date": "2026-10-22T13:35:41.975000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-28T13:10:31+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.33-0.1.hum1@aarch64",
"Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.33-0.1.hum1@x86_64",
"Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.33-0.1.hum1@aarch64",
"Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.33-0.1.hum1@x86_64",
"Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.33-0.1.hum1@aarch64",
"Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.33-0.1.hum1@x86_64",
"Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.33-0.1.hum1@aarch64",
"Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.33-0.1.hum1@x86_64",
"Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.33-0.1.hum1@aarch64",
"Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.33-0.1.hum1@x86_64",
"Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.33-0.1.hum1@aarch64",
"Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.33-0.1.hum1@x86_64",
"Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.33-0.1.hum1@aarch64",
"Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.33-0.1.hum1@x86_64",
"Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.133-0.1.hum1@aarch64",
"Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.133-0.1.hum1@x86_64",
"Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.133-0.1.hum1@aarch64",
"Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.133-0.1.hum1@x86_64",
"Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.133-0.1.hum1@aarch64",
"Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.133-0.1.hum1@x86_64",
"Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.33-0.1.hum1@aarch64",
"Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.33-0.1.hum1@x86_64",
"Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.133-0.1.hum1@aarch64",
"Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.133-0.1.hum1@x86_64",
"Red Hat Hardened Images:dotnet8.0-0:8.0.133-0.1.hum1@src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:91709"
},
{
"category": "workaround",
"details": "See the security bulletin for a detailed mitigation procedure.",
"product_ids": [
"Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.33-0.1.hum1@aarch64",
"Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.33-0.1.hum1@x86_64",
"Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.33-0.1.hum1@aarch64",
"Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.33-0.1.hum1@x86_64",
"Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.33-0.1.hum1@aarch64",
"Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.33-0.1.hum1@x86_64",
"Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.33-0.1.hum1@aarch64",
"Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.33-0.1.hum1@x86_64",
"Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.33-0.1.hum1@aarch64",
"Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.33-0.1.hum1@x86_64",
"Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.33-0.1.hum1@aarch64",
"Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.33-0.1.hum1@x86_64",
"Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.33-0.1.hum1@aarch64",
"Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.33-0.1.hum1@x86_64",
"Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.133-0.1.hum1@aarch64",
"Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.133-0.1.hum1@x86_64",
"Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.133-0.1.hum1@aarch64",
"Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.133-0.1.hum1@x86_64",
"Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.133-0.1.hum1@aarch64",
"Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.133-0.1.hum1@x86_64",
"Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.33-0.1.hum1@aarch64",
"Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.33-0.1.hum1@x86_64",
"Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.133-0.1.hum1@aarch64",
"Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.133-0.1.hum1@x86_64",
"Red Hat Hardened Images:dotnet8.0-0:8.0.133-0.1.hum1@src"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.33-0.1.hum1@aarch64",
"Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.33-0.1.hum1@x86_64",
"Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.33-0.1.hum1@aarch64",
"Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.33-0.1.hum1@x86_64",
"Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.33-0.1.hum1@aarch64",
"Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.33-0.1.hum1@x86_64",
"Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.33-0.1.hum1@aarch64",
"Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.33-0.1.hum1@x86_64",
"Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.33-0.1.hum1@aarch64",
"Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.33-0.1.hum1@x86_64",
"Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.33-0.1.hum1@aarch64",
"Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.33-0.1.hum1@x86_64",
"Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.33-0.1.hum1@aarch64",
"Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.33-0.1.hum1@x86_64",
"Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.133-0.1.hum1@aarch64",
"Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.133-0.1.hum1@x86_64",
"Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.133-0.1.hum1@aarch64",
"Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.133-0.1.hum1@x86_64",
"Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.133-0.1.hum1@aarch64",
"Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.133-0.1.hum1@x86_64",
"Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.33-0.1.hum1@aarch64",
"Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.33-0.1.hum1@x86_64",
"Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.133-0.1.hum1@aarch64",
"Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.133-0.1.hum1@x86_64",
"Red Hat Hardened Images:dotnet8.0-0:8.0.133-0.1.hum1@src"
]
}
],
"threats": [
{
"category": "exploit_status",
"date": "2026-10-27T00:00:00+00:00",
"details": "CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
},
{
"category": "impact",
"details": "Important"
}
],
"title": "brotli: Out-of-Bounds Write in Google Brotli Decoder"
},
{
"cve": "CVE-2026-114148",
"cwe": {
"id": "CWE-276",
"name": "Incorrect Default Permissions"
},
"discovery_date": "2026-10-28T17:58:03+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.33-0.1.hum1@aarch64",
"Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.33-0.1.hum1@x86_64",
"Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.33-0.1.hum1@aarch64",
"Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.33-0.1.hum1@x86_64",
"Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.33-0.1.hum1@aarch64",
"Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.33-0.1.hum1@x86_64",
"Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.33-0.1.hum1@aarch64",
"Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.33-0.1.hum1@x86_64",
"Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.33-0.1.hum1@aarch64",
"Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.33-0.1.hum1@x86_64",
"Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.33-0.1.hum1@aarch64",
"Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.33-0.1.hum1@x86_64",
"Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.33-0.1.hum1@aarch64",
"Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.33-0.1.hum1@x86_64",
"Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.33-0.1.hum1@aarch64",
"Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.33-0.1.hum1@x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2562054"
}
],
"notes": [
{
"category": "description",
"text": "Incorrect default permissions in ASP.NET Core allows an authorized attacker to elevate privileges locally.\n\nWhat privileges could be gained by an attacker who successfully exploited this vulnerability?\nAn attacker who successfully exploited this vulnerability could gain the highest privileges on the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet8.0: dotnet9.0: dotnet11.0: dotnet10.0: ASP.NET Core Elevation of Privilege Vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as an Important severity for Red Hat environments because improper file permissions on installed .NET components can allow an authenticated local user to modify system files and escalate privileges to root, compromising the entire host. Although the flaw grants full local compromise, exploitation is bounded by the prerequisite of having existing user access or shell execution on the underlying system, preventing remote unauthenticated exploitation. Systems running Red Hat Enterprise Linux in multi-user or shared hosting environments that execute .NET workloads are primarily exposed to this risk.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.133-0.1.hum1@aarch64",
"Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.133-0.1.hum1@x86_64",
"Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.133-0.1.hum1@aarch64",
"Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.133-0.1.hum1@x86_64",
"Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.133-0.1.hum1@aarch64",
"Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.133-0.1.hum1@x86_64",
"Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.133-0.1.hum1@aarch64",
"Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.133-0.1.hum1@x86_64",
"Red Hat Hardened Images:dotnet8.0-0:8.0.133-0.1.hum1@src"
],
"known_not_affected": [
"Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.33-0.1.hum1@aarch64",
"Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.33-0.1.hum1@x86_64",
"Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.33-0.1.hum1@aarch64",
"Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.33-0.1.hum1@x86_64",
"Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.33-0.1.hum1@aarch64",
"Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.33-0.1.hum1@x86_64",
"Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.33-0.1.hum1@aarch64",
"Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.33-0.1.hum1@x86_64",
"Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.33-0.1.hum1@aarch64",
"Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.33-0.1.hum1@x86_64",
"Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.33-0.1.hum1@aarch64",
"Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.33-0.1.hum1@x86_64",
"Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.33-0.1.hum1@aarch64",
"Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.33-0.1.hum1@x86_64",
"Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.33-0.1.hum1@aarch64",
"Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.33-0.1.hum1@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-114148"
},
{
"category": "external",
"summary": "RHBZ#2562054",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2562054"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-114148",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-114148"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-114148",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-114148"
}
],
"release_date": "2026-10-23T17:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-28T13:10:31+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.133-0.1.hum1@aarch64",
"Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.133-0.1.hum1@x86_64",
"Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.133-0.1.hum1@aarch64",
"Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.133-0.1.hum1@x86_64",
"Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.133-0.1.hum1@aarch64",
"Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.133-0.1.hum1@x86_64",
"Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.133-0.1.hum1@aarch64",
"Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.133-0.1.hum1@x86_64",
"Red Hat Hardened Images:dotnet8.0-0:8.0.133-0.1.hum1@src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:91709"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"exploitCodeMaturity": "UNPROVEN",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"remediationLevel": "OFFICIAL_FIX",
"reportConfidence": "CONFIRMED",
"scope": "UNCHANGED",
"temporalScore": 6.8,
"temporalSeverity": "MEDIUM",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.33-0.1.hum1@aarch64",
"Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.33-0.1.hum1@x86_64",
"Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.33-0.1.hum1@aarch64",
"Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.33-0.1.hum1@x86_64",
"Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.33-0.1.hum1@aarch64",
"Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.33-0.1.hum1@x86_64",
"Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.33-0.1.hum1@aarch64",
"Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.33-0.1.hum1@x86_64",
"Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.33-0.1.hum1@aarch64",
"Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.33-0.1.hum1@x86_64",
"Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.33-0.1.hum1@aarch64",
"Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.33-0.1.hum1@x86_64",
"Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.33-0.1.hum1@aarch64",
"Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.33-0.1.hum1@x86_64",
"Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.133-0.1.hum1@aarch64",
"Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.133-0.1.hum1@x86_64",
"Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.133-0.1.hum1@aarch64",
"Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.133-0.1.hum1@x86_64",
"Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.133-0.1.hum1@aarch64",
"Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.133-0.1.hum1@x86_64",
"Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.33-0.1.hum1@aarch64",
"Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.33-0.1.hum1@x86_64",
"Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.133-0.1.hum1@aarch64",
"Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.133-0.1.hum1@x86_64",
"Red Hat Hardened Images:dotnet8.0-0:8.0.133-0.1.hum1@src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet8.0: dotnet9.0: dotnet11.0: dotnet10.0: ASP.NET Core Elevation of Privilege Vulnerability"
}
]
}
Loading…
Loading…
Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline
Sightings and recorded dates, grouped by day · UTC
Loading timeline…
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.