CVE-2026-109475

.NET Denial of Service Vulnerability

7.5 HighFix available

CVE-2026-109475 is a high vulnerability (CVSS 7.5) in Microsoft .net 10.0 Installed On Linux, published November 10, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.28%, the 70th percentile. Fixed in Microsoft.NETCore.App.Runtime.linux-arm 8.0.34.

Severity: 7.5 HighCVSS 3.1, CVE List
Exploit chance: 1.28%EPSS, 70th percentile
Exploitation: None knownNot on CISA’s or ENISA’s lists
Fixed in: 8.0.34Microsoft.NETCore.App.Runtime.linux-arm +299 more

Description

Stack-based buffer overflow in .NET allows an unauthorized attacker to deny service over a network.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: None
Integrity: None
Availability: High

Exploit likelihood

1.28%Unchanged since Nov 11, 2026

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`Microsoft.NETCore.App.Runtime.linux-arm` NuGet	8.0.0-0 to 8.0.33	8.0.34
`Microsoft.NETCore.App.Runtime.linux-arm64` NuGet	8.0.0-0 to 8.0.33	8.0.34
`Microsoft.NETCore.App.Runtime.linux-musl-arm` NuGet	8.0.0-0 to 8.0.33	8.0.34
`Microsoft.NETCore.App.Runtime.linux-musl-arm64` NuGet	8.0.0-0 to 8.0.33	8.0.34
`Microsoft.NETCore.App.Runtime.linux-musl-x64` NuGet	8.0.0-0 to 8.0.33	8.0.34
`Microsoft.NETCore.App.Runtime.linux-x64` NuGet	8.0.0-0 to 8.0.33	8.0.34
`Microsoft.NETCore.App.Runtime.osx-arm64` NuGet	8.0.0-0 to 8.0.33	8.0.34
`Microsoft.NETCore.App.Runtime.osx-x64` NuGet	8.0.0-0 to 8.0.33	8.0.34
`Microsoft.NETCore.App.Runtime.linux-arm` NuGet	9.0.0-0 to 9.0.22	9.0.23
`Microsoft.NETCore.App.Runtime.linux-arm64` NuGet	9.0.0-0 to 9.0.22	9.0.23

Show 290 moreShow less

Affected packages
Package	Affected	Fixed
`Microsoft.NETCore.App.Runtime.linux-musl-arm` NuGet	9.0.0-0 to 9.0.22	9.0.23
`Microsoft.NETCore.App.Runtime.linux-musl-arm64` NuGet	9.0.0-0 to 9.0.22	9.0.23
`Microsoft.NETCore.App.Runtime.linux-musl-x64` NuGet	9.0.0-0 to 9.0.22	9.0.23
`Microsoft.NETCore.App.Runtime.linux-x64` NuGet	9.0.0-0 to 9.0.22	9.0.23
`Microsoft.NETCore.App.Runtime.osx-arm64` NuGet	9.0.0-0 to 9.0.22	9.0.23
`Microsoft.NETCore.App.Runtime.osx-x64` NuGet	9.0.0-0 to 9.0.22	9.0.23
`Microsoft.NETCore.App.Runtime.linux-arm` NuGet	10.0.0-0 to 10.0.14	10.0.15
`Microsoft.NETCore.App.Runtime.linux-arm64` NuGet	10.0.0-0 to 10.0.14	10.0.15
`Microsoft.NETCore.App.Runtime.linux-musl-arm` NuGet	10.0.0-0 to 10.0.14	10.0.15
`Microsoft.NETCore.App.Runtime.linux-musl-arm64` NuGet	10.0.0-0 to 10.0.14	10.0.15
`Microsoft.NETCore.App.Runtime.linux-musl-x64` NuGet	10.0.0-0 to 10.0.14	10.0.15
`Microsoft.NETCore.App.Runtime.linux-x64` NuGet	10.0.0-0 to 10.0.14	10.0.15
`Microsoft.NETCore.App.Runtime.osx-arm64` NuGet	10.0.0-0 to 10.0.14	10.0.15
`Microsoft.NETCore.App.Runtime.osx-x64` NuGet	10.0.0-0 to 10.0.14	10.0.15
`Microsoft.NETCore.App.Runtime.linux-arm` NuGet	11.0.0-preview.1.26104.118 to 11.0.0-rc.3.26522.148	11.0.0
`Microsoft.NETCore.App.Runtime.linux-arm64` NuGet	11.0.0-preview.1.26104.118 to 11.0.0-rc.3.26522.148	11.0.0
`Microsoft.NETCore.App.Runtime.linux-musl-arm` NuGet	11.0.0-preview.1.26104.118 to 11.0.0-rc.3.26522.148	11.0.0
`Microsoft.NETCore.App.Runtime.linux-musl-arm64` NuGet	11.0.0-preview.1.26104.118 to 11.0.0-rc.3.26522.148	11.0.0
`Microsoft.NETCore.App.Runtime.linux-musl-x64` NuGet	11.0.0-preview.1.26104.118 to 11.0.0-rc.3.26522.148	11.0.0
`Microsoft.NETCore.App.Runtime.linux-x64` NuGet	11.0.0-preview.1.26104.118 to 11.0.0-rc.3.26522.148	11.0.0
`Microsoft.NETCore.App.Runtime.osx-arm64` NuGet	11.0.0-preview.1.26104.118 to 11.0.0-rc.3.26522.148	11.0.0
`Microsoft.NETCore.App.Runtime.osx-x64` NuGet	11.0.0-preview.1.26104.118 to 11.0.0-rc.3.26522.148	11.0.0
`dotnet10-runtime` Alpine:v3.24	before 10.0.15-r0	10.0.15-r0
`dotnet8-runtime` Alpine:v3.22	before 8.0.34-r0	8.0.34-r0
`dotnet8-runtime` Alpine:v3.23	before 8.0.34-r0	8.0.34-r0
`dotnet8-runtime` Alpine:v3.24	before 8.0.34-r0	8.0.34-r0
`dotnet9-runtime` Alpine:v3.22	before 9.0.23-r0	9.0.23-r0
`dotnet9-runtime` Alpine:v3.23	before 9.0.23-r0	9.0.23-r0
`dotnet9-runtime` Alpine:v3.24	before 9.0.23-r0	9.0.23-r0
`aspnetcore-runtime-9.0` AlmaLinux:8 From an advisory covering 6 CVEs	before 9.0.23-1.el8_10	9.0.23-1.el8_10
`aspnetcore-runtime-dbg-9.0` AlmaLinux:8 From an advisory covering 6 CVEs	before 9.0.23-1.el8_10	9.0.23-1.el8_10
`aspnetcore-targeting-pack-9.0` AlmaLinux:8 From an advisory covering 6 CVEs	before 9.0.23-1.el8_10	9.0.23-1.el8_10
`dotnet-apphost-pack-9.0` AlmaLinux:8 From an advisory covering 6 CVEs	before 9.0.23-1.el8_10	9.0.23-1.el8_10
`dotnet-hostfxr-9.0` AlmaLinux:8 From an advisory covering 6 CVEs	before 9.0.23-1.el8_10	9.0.23-1.el8_10
`dotnet-runtime-9.0` AlmaLinux:8 From an advisory covering 6 CVEs	before 9.0.23-1.el8_10	9.0.23-1.el8_10
`dotnet-runtime-dbg-9.0` AlmaLinux:8 From an advisory covering 6 CVEs	before 9.0.23-1.el8_10	9.0.23-1.el8_10
`dotnet-sdk-9.0` AlmaLinux:8 From an advisory covering 6 CVEs	before 9.0.124-1.el8_10	9.0.124-1.el8_10
`dotnet-sdk-9.0-source-built-artifacts` AlmaLinux:8 From an advisory covering 6 CVEs	before 9.0.124-1.el8_10	9.0.124-1.el8_10
`dotnet-sdk-aot-9.0` AlmaLinux:8 From an advisory covering 6 CVEs	before 9.0.124-1.el8_10	9.0.124-1.el8_10
`dotnet-sdk-dbg-9.0` AlmaLinux:8 From an advisory covering 6 CVEs	before 9.0.124-1.el8_10	9.0.124-1.el8_10
`dotnet-targeting-pack-9.0` AlmaLinux:8 From an advisory covering 6 CVEs	before 9.0.23-1.el8_10	9.0.23-1.el8_10
`dotnet-templates-9.0` AlmaLinux:8 From an advisory covering 6 CVEs	before 9.0.124-1.el8_10	9.0.124-1.el8_10
`netstandard-targeting-pack-2.1` AlmaLinux:8 From an advisory covering 6 CVEs	before 9.0.124-1.el8_10	9.0.124-1.el8_10
`aspnetcore-runtime-8.0` AlmaLinux:8 From an advisory covering 7 CVEs	before 8.0.34-1.el8_10	8.0.34-1.el8_10
`aspnetcore-runtime-dbg-8.0` AlmaLinux:8 From an advisory covering 7 CVEs	before 8.0.34-1.el8_10	8.0.34-1.el8_10
`aspnetcore-targeting-pack-8.0` AlmaLinux:8 From an advisory covering 7 CVEs	before 8.0.34-1.el8_10	8.0.34-1.el8_10
`dotnet-apphost-pack-8.0` AlmaLinux:8 From an advisory covering 7 CVEs	before 8.0.34-1.el8_10	8.0.34-1.el8_10
`dotnet-hostfxr-8.0` AlmaLinux:8 From an advisory covering 7 CVEs	before 8.0.34-1.el8_10	8.0.34-1.el8_10
`dotnet-runtime-8.0` AlmaLinux:8 From an advisory covering 7 CVEs	before 8.0.34-1.el8_10	8.0.34-1.el8_10
`dotnet-runtime-dbg-8.0` AlmaLinux:8 From an advisory covering 7 CVEs	before 8.0.34-1.el8_10	8.0.34-1.el8_10
`dotnet-sdk-8.0` AlmaLinux:8 From an advisory covering 7 CVEs	before 8.0.134-1.el8_10	8.0.134-1.el8_10
`dotnet-sdk-8.0-source-built-artifacts` AlmaLinux:8 From an advisory covering 7 CVEs	before 8.0.134-1.el8_10	8.0.134-1.el8_10
`dotnet-sdk-dbg-8.0` AlmaLinux:8 From an advisory covering 7 CVEs	before 8.0.134-1.el8_10	8.0.134-1.el8_10
`dotnet-targeting-pack-8.0` AlmaLinux:8 From an advisory covering 7 CVEs	before 8.0.34-1.el8_10	8.0.34-1.el8_10
`dotnet-templates-8.0` AlmaLinux:8 From an advisory covering 7 CVEs	before 8.0.134-1.el8_10	8.0.134-1.el8_10
`aspnetcore-runtime-10.0` AlmaLinux:8 From an advisory covering 6 CVEs	before 10.0.15-1.el8_10	10.0.15-1.el8_10
`aspnetcore-runtime-dbg-10.0` AlmaLinux:8 From an advisory covering 6 CVEs	before 10.0.15-1.el8_10	10.0.15-1.el8_10
`aspnetcore-targeting-pack-10.0` AlmaLinux:8 From an advisory covering 6 CVEs	before 10.0.15-1.el8_10	10.0.15-1.el8_10
`dotnet-apphost-pack-10.0` AlmaLinux:8 From an advisory covering 6 CVEs	before 10.0.15-1.el8_10	10.0.15-1.el8_10
`dotnet-hostfxr-10.0` AlmaLinux:8 From an advisory covering 6 CVEs	before 10.0.15-1.el8_10	10.0.15-1.el8_10
`dotnet-runtime-10.0` AlmaLinux:8 From an advisory covering 6 CVEs	before 10.0.15-1.el8_10	10.0.15-1.el8_10
`dotnet-runtime-dbg-10.0` AlmaLinux:8 From an advisory covering 6 CVEs	before 10.0.15-1.el8_10	10.0.15-1.el8_10
`dotnet-sdk-10.0` AlmaLinux:8 From an advisory covering 6 CVEs	before 10.0.115-1.el8_10	10.0.115-1.el8_10
`dotnet-sdk-10.0-source-built-artifacts` AlmaLinux:8 From an advisory covering 6 CVEs	before 10.0.115-1.el8_10	10.0.115-1.el8_10
`dotnet-sdk-aot-10.0` AlmaLinux:8 From an advisory covering 6 CVEs	before 10.0.115-1.el8_10	10.0.115-1.el8_10
`dotnet-sdk-dbg-10.0` AlmaLinux:8 From an advisory covering 6 CVEs	before 10.0.115-1.el8_10	10.0.115-1.el8_10
`dotnet-targeting-pack-10.0` AlmaLinux:8 From an advisory covering 6 CVEs	before 10.0.15-1.el8_10	10.0.15-1.el8_10
`dotnet-templates-10.0` AlmaLinux:8 From an advisory covering 6 CVEs	before 10.0.115-1.el8_10	10.0.115-1.el8_10
`Microsoft.NETCore.App.Runtime.linux-arm` NuGet	8.0.0-0 up to 8.0.34, plus listed versions 8.0.08.0.18.0.108.0.118.0.12 Show 28 moreShow less 8.0.138.0.148.0.158.0.168.0.178.0.188.0.198.0.28.0.208.0.218.0.228.0.238.0.248.0.258.0.268.0.278.0.288.0.298.0.38.0.308.0.318.0.328.0.338.0.48.0.58.0.68.0.78.0.8	8.0.34
`Microsoft.NETCore.App.Runtime.linux-arm64` NuGet	8.0.0-0 up to 8.0.34, plus listed versions 8.0.08.0.18.0.108.0.118.0.12 Show 28 moreShow less 8.0.138.0.148.0.158.0.168.0.178.0.188.0.198.0.28.0.208.0.218.0.228.0.238.0.248.0.258.0.268.0.278.0.288.0.298.0.38.0.308.0.318.0.328.0.338.0.48.0.58.0.68.0.78.0.8	8.0.34
`Microsoft.NETCore.App.Runtime.linux-musl-arm` NuGet	8.0.0-0 up to 8.0.34, plus listed versions 8.0.08.0.18.0.108.0.118.0.12 Show 28 moreShow less 8.0.138.0.148.0.158.0.168.0.178.0.188.0.198.0.28.0.208.0.218.0.228.0.238.0.248.0.258.0.268.0.278.0.288.0.298.0.38.0.308.0.318.0.328.0.338.0.48.0.58.0.68.0.78.0.8	8.0.34
`Microsoft.NETCore.App.Runtime.linux-musl-arm64` NuGet	8.0.0-0 up to 8.0.34, plus listed versions 8.0.08.0.18.0.108.0.118.0.12 Show 28 moreShow less 8.0.138.0.148.0.158.0.168.0.178.0.188.0.198.0.28.0.208.0.218.0.228.0.238.0.248.0.258.0.268.0.278.0.288.0.298.0.38.0.308.0.318.0.328.0.338.0.48.0.58.0.68.0.78.0.8	8.0.34
`Microsoft.NETCore.App.Runtime.linux-musl-x64` NuGet	8.0.0-0 up to 8.0.34, plus listed versions 8.0.08.0.18.0.108.0.118.0.12 Show 28 moreShow less 8.0.138.0.148.0.158.0.168.0.178.0.188.0.198.0.28.0.208.0.218.0.228.0.238.0.248.0.258.0.268.0.278.0.288.0.298.0.38.0.308.0.318.0.328.0.338.0.48.0.58.0.68.0.78.0.8	8.0.34
`Microsoft.NETCore.App.Runtime.linux-x64` NuGet	8.0.0-0 up to 8.0.34, plus listed versions 8.0.08.0.18.0.108.0.118.0.12 Show 28 moreShow less 8.0.138.0.148.0.158.0.168.0.178.0.188.0.198.0.28.0.208.0.218.0.228.0.238.0.248.0.258.0.268.0.278.0.288.0.298.0.38.0.308.0.318.0.328.0.338.0.48.0.58.0.68.0.78.0.8	8.0.34
`Microsoft.NETCore.App.Runtime.osx-arm64` NuGet	8.0.0-0 up to 8.0.34, plus listed versions 8.0.08.0.18.0.108.0.118.0.12 Show 28 moreShow less 8.0.138.0.148.0.158.0.168.0.178.0.188.0.198.0.28.0.208.0.218.0.228.0.238.0.248.0.258.0.268.0.278.0.288.0.298.0.38.0.308.0.318.0.328.0.338.0.48.0.58.0.68.0.78.0.8	8.0.34
`Microsoft.NETCore.App.Runtime.osx-x64` NuGet	8.0.0-0 up to 8.0.34, plus listed versions 8.0.08.0.18.0.108.0.118.0.12 Show 28 moreShow less 8.0.138.0.148.0.158.0.168.0.178.0.188.0.198.0.28.0.208.0.218.0.228.0.238.0.248.0.258.0.268.0.278.0.288.0.298.0.38.0.308.0.318.0.328.0.338.0.48.0.58.0.68.0.78.0.8	8.0.34
`Microsoft.NETCore.App.Runtime.linux-arm` NuGet	9.0.0-0 up to 9.0.23, plus listed versions 9.0.09.0.19.0.109.0.119.0.12 Show 18 moreShow less 9.0.139.0.149.0.159.0.169.0.179.0.189.0.199.0.29.0.209.0.219.0.229.0.39.0.49.0.59.0.69.0.79.0.89.0.9	9.0.23
`Microsoft.NETCore.App.Runtime.linux-arm64` NuGet	9.0.0-0 up to 9.0.23, plus listed versions 9.0.09.0.19.0.109.0.119.0.12 Show 18 moreShow less 9.0.139.0.149.0.159.0.169.0.179.0.189.0.199.0.29.0.209.0.219.0.229.0.39.0.49.0.59.0.69.0.79.0.89.0.9	9.0.23
`Microsoft.NETCore.App.Runtime.linux-musl-arm` NuGet	9.0.0-0 up to 9.0.23, plus listed versions 9.0.09.0.19.0.109.0.119.0.12 Show 18 moreShow less 9.0.139.0.149.0.159.0.169.0.179.0.189.0.199.0.29.0.209.0.219.0.229.0.39.0.49.0.59.0.69.0.79.0.89.0.9	9.0.23
`Microsoft.NETCore.App.Runtime.linux-musl-arm64` NuGet	9.0.0-0 up to 9.0.23, plus listed versions 9.0.09.0.19.0.109.0.119.0.12 Show 18 moreShow less 9.0.139.0.149.0.159.0.169.0.179.0.189.0.199.0.29.0.209.0.219.0.229.0.39.0.49.0.59.0.69.0.79.0.89.0.9	9.0.23
`Microsoft.NETCore.App.Runtime.linux-musl-x64` NuGet	9.0.0-0 up to 9.0.23, plus listed versions 9.0.09.0.19.0.109.0.119.0.12 Show 18 moreShow less 9.0.139.0.149.0.159.0.169.0.179.0.189.0.199.0.29.0.209.0.219.0.229.0.39.0.49.0.59.0.69.0.79.0.89.0.9	9.0.23
`Microsoft.NETCore.App.Runtime.linux-x64` NuGet	9.0.0-0 up to 9.0.23, plus listed versions 9.0.09.0.19.0.109.0.119.0.12 Show 18 moreShow less 9.0.139.0.149.0.159.0.169.0.179.0.189.0.199.0.29.0.209.0.219.0.229.0.39.0.49.0.59.0.69.0.79.0.89.0.9	9.0.23
`Microsoft.NETCore.App.Runtime.osx-arm64` NuGet	9.0.0-0 up to 9.0.23, plus listed versions 9.0.09.0.19.0.109.0.119.0.12 Show 18 moreShow less 9.0.139.0.149.0.159.0.169.0.179.0.189.0.199.0.29.0.209.0.219.0.229.0.39.0.49.0.59.0.69.0.79.0.89.0.9	9.0.23
`Microsoft.NETCore.App.Runtime.osx-x64` NuGet	9.0.0-0 up to 9.0.23, plus listed versions 9.0.09.0.19.0.109.0.119.0.12 Show 18 moreShow less 9.0.139.0.149.0.159.0.169.0.179.0.189.0.199.0.29.0.209.0.219.0.229.0.39.0.49.0.59.0.69.0.79.0.89.0.9	9.0.23
`Microsoft.NETCore.App.Runtime.linux-arm` NuGet	10.0.0-0 up to 10.0.15, plus listed versions 10.0.010.0.110.0.1010.0.1110.0.12 Show 10 moreShow less 10.0.1310.0.1410.0.210.0.310.0.410.0.510.0.610.0.710.0.810.0.9	10.0.15
`Microsoft.NETCore.App.Runtime.linux-arm64` NuGet	10.0.0-0 up to 10.0.15, plus listed versions 10.0.010.0.110.0.1010.0.1110.0.12 Show 10 moreShow less 10.0.1310.0.1410.0.210.0.310.0.410.0.510.0.610.0.710.0.810.0.9	10.0.15
`Microsoft.NETCore.App.Runtime.linux-musl-arm` NuGet	10.0.0-0 up to 10.0.15, plus listed versions 10.0.010.0.110.0.1010.0.1110.0.12 Show 10 moreShow less 10.0.1310.0.1410.0.210.0.310.0.410.0.510.0.610.0.710.0.810.0.9	10.0.15
`Microsoft.NETCore.App.Runtime.linux-musl-arm64` NuGet	10.0.0-0 up to 10.0.15, plus listed versions 10.0.010.0.110.0.1010.0.1110.0.12 Show 10 moreShow less 10.0.1310.0.1410.0.210.0.310.0.410.0.510.0.610.0.710.0.810.0.9	10.0.15
`Microsoft.NETCore.App.Runtime.linux-musl-x64` NuGet	10.0.0-0 up to 10.0.15, plus listed versions 10.0.010.0.110.0.1010.0.1110.0.12 Show 10 moreShow less 10.0.1310.0.1410.0.210.0.310.0.410.0.510.0.610.0.710.0.810.0.9	10.0.15
`Microsoft.NETCore.App.Runtime.linux-x64` NuGet	10.0.0-0 up to 10.0.15, plus listed versions 10.0.010.0.110.0.1010.0.1110.0.12 Show 10 moreShow less 10.0.1310.0.1410.0.210.0.310.0.410.0.510.0.610.0.710.0.810.0.9	10.0.15
`Microsoft.NETCore.App.Runtime.osx-arm64` NuGet	10.0.0-0 up to 10.0.15, plus listed versions 10.0.010.0.110.0.1010.0.1110.0.12 Show 10 moreShow less 10.0.1310.0.1410.0.210.0.310.0.410.0.510.0.610.0.710.0.810.0.9	10.0.15
`Microsoft.NETCore.App.Runtime.osx-x64` NuGet	10.0.0-0 up to 10.0.15, plus listed versions 10.0.010.0.110.0.1010.0.1110.0.12 Show 10 moreShow less 10.0.1310.0.1410.0.210.0.310.0.410.0.510.0.610.0.710.0.810.0.9	10.0.15
`Microsoft.NETCore.App.Runtime.linux-arm` NuGet	11.0.0-preview.1.26104.118 up to 11.0.0	11.0.0
`Microsoft.NETCore.App.Runtime.linux-arm64` NuGet	11.0.0-preview.1.26104.118 up to 11.0.0	11.0.0
`Microsoft.NETCore.App.Runtime.linux-musl-arm` NuGet	11.0.0-preview.1.26104.118 up to 11.0.0	11.0.0
`Microsoft.NETCore.App.Runtime.linux-musl-arm64` NuGet	11.0.0-preview.1.26104.118 up to 11.0.0	11.0.0
`Microsoft.NETCore.App.Runtime.linux-musl-x64` NuGet	11.0.0-preview.1.26104.118 up to 11.0.0	11.0.0
`Microsoft.NETCore.App.Runtime.linux-x64` NuGet	11.0.0-preview.1.26104.118 up to 11.0.0	11.0.0
`Microsoft.NETCore.App.Runtime.osx-arm64` NuGet	11.0.0-preview.1.26104.118 up to 11.0.0	11.0.0
`Microsoft.NETCore.App.Runtime.osx-x64` NuGet	11.0.0-preview.1.26104.118 up to 11.0.0	11.0.0
`aspnetcore-runtime-9.0` Red Hat:enterprise_linux:8::appstream From an advisory covering 6 CVEs	before 0:9.0.23-1.el8_10	0:9.0.23-1.el8_10
`aspnetcore-runtime-dbg-9.0` Red Hat:enterprise_linux:8::appstream From an advisory covering 6 CVEs	before 0:9.0.23-1.el8_10	0:9.0.23-1.el8_10
`aspnetcore-targeting-pack-9.0` Red Hat:enterprise_linux:8::appstream From an advisory covering 6 CVEs	before 0:9.0.23-1.el8_10	0:9.0.23-1.el8_10
`dotnet-apphost-pack-9.0` Red Hat:enterprise_linux:8::appstream From an advisory covering 6 CVEs	before 0:9.0.23-1.el8_10	0:9.0.23-1.el8_10
`dotnet-apphost-pack-9.0-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 6 CVEs	before 0:9.0.23-1.el8_10	0:9.0.23-1.el8_10
`dotnet-hostfxr-9.0` Red Hat:enterprise_linux:8::appstream From an advisory covering 6 CVEs	before 0:9.0.23-1.el8_10	0:9.0.23-1.el8_10
`dotnet-hostfxr-9.0-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 6 CVEs	before 0:9.0.23-1.el8_10	0:9.0.23-1.el8_10
`dotnet-runtime-9.0` Red Hat:enterprise_linux:8::appstream From an advisory covering 6 CVEs	before 0:9.0.23-1.el8_10	0:9.0.23-1.el8_10
`dotnet-runtime-9.0-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 6 CVEs	before 0:9.0.23-1.el8_10	0:9.0.23-1.el8_10
`dotnet-runtime-dbg-9.0` Red Hat:enterprise_linux:8::appstream From an advisory covering 6 CVEs	before 0:9.0.23-1.el8_10	0:9.0.23-1.el8_10
`dotnet-sdk-9.0` Red Hat:enterprise_linux:8::appstream From an advisory covering 6 CVEs	before 0:9.0.124-1.el8_10	0:9.0.124-1.el8_10
`dotnet-sdk-9.0-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 6 CVEs	before 0:9.0.124-1.el8_10	0:9.0.124-1.el8_10
`dotnet-sdk-aot-9.0` Red Hat:enterprise_linux:8::appstream From an advisory covering 6 CVEs	before 0:9.0.124-1.el8_10	0:9.0.124-1.el8_10
`dotnet-sdk-aot-9.0-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 6 CVEs	before 0:9.0.124-1.el8_10	0:9.0.124-1.el8_10
`dotnet-sdk-dbg-9.0` Red Hat:enterprise_linux:8::appstream From an advisory covering 6 CVEs	before 0:9.0.124-1.el8_10	0:9.0.124-1.el8_10
`dotnet-targeting-pack-9.0` Red Hat:enterprise_linux:8::appstream From an advisory covering 6 CVEs	before 0:9.0.23-1.el8_10	0:9.0.23-1.el8_10
`dotnet-templates-9.0` Red Hat:enterprise_linux:8::appstream From an advisory covering 6 CVEs	before 0:9.0.124-1.el8_10	0:9.0.124-1.el8_10
`dotnet9.0` Red Hat:enterprise_linux:8::appstream From an advisory covering 6 CVEs	before 0:9.0.124-1.el8_10	0:9.0.124-1.el8_10
`dotnet9.0-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 6 CVEs	before 0:9.0.124-1.el8_10	0:9.0.124-1.el8_10
`dotnet9.0-debugsource` Red Hat:enterprise_linux:8::appstream From an advisory covering 6 CVEs	before 0:9.0.124-1.el8_10	0:9.0.124-1.el8_10
`netstandard-targeting-pack-2.1` Red Hat:enterprise_linux:8::appstream From an advisory covering 6 CVEs	before 0:9.0.124-1.el8_10	0:9.0.124-1.el8_10
`dotnet-apphost-pack-9.0-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 6 CVEs	before 0:9.0.23-1.el8_10	0:9.0.23-1.el8_10
`dotnet-hostfxr-9.0-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 6 CVEs	before 0:9.0.23-1.el8_10	0:9.0.23-1.el8_10
`dotnet-runtime-9.0-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 6 CVEs	before 0:9.0.23-1.el8_10	0:9.0.23-1.el8_10
`dotnet-sdk-9.0-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 6 CVEs	before 0:9.0.124-1.el8_10	0:9.0.124-1.el8_10
`dotnet-sdk-9.0-source-built-artifacts` Red Hat:enterprise_linux:8::crb From an advisory covering 6 CVEs	before 0:9.0.124-1.el8_10	0:9.0.124-1.el8_10
`dotnet-sdk-aot-9.0-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 6 CVEs	before 0:9.0.124-1.el8_10	0:9.0.124-1.el8_10
`dotnet9.0-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 6 CVEs	before 0:9.0.124-1.el8_10	0:9.0.124-1.el8_10
`dotnet9.0-debugsource` Red Hat:enterprise_linux:8::crb From an advisory covering 6 CVEs	before 0:9.0.124-1.el8_10	0:9.0.124-1.el8_10
`aspnetcore-runtime-8.0` Red Hat:enterprise_linux:8::appstream From an advisory covering 7 CVEs	before 0:8.0.34-1.el8_10	0:8.0.34-1.el8_10
`aspnetcore-runtime-dbg-8.0` Red Hat:enterprise_linux:8::appstream From an advisory covering 7 CVEs	before 0:8.0.34-1.el8_10	0:8.0.34-1.el8_10
`aspnetcore-targeting-pack-8.0` Red Hat:enterprise_linux:8::appstream From an advisory covering 7 CVEs	before 0:8.0.34-1.el8_10	0:8.0.34-1.el8_10
`dotnet-apphost-pack-8.0` Red Hat:enterprise_linux:8::appstream From an advisory covering 7 CVEs	before 0:8.0.34-1.el8_10	0:8.0.34-1.el8_10
`dotnet-apphost-pack-8.0-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 7 CVEs	before 0:8.0.34-1.el8_10	0:8.0.34-1.el8_10
`dotnet-hostfxr-8.0` Red Hat:enterprise_linux:8::appstream From an advisory covering 7 CVEs	before 0:8.0.34-1.el8_10	0:8.0.34-1.el8_10
`dotnet-hostfxr-8.0-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 7 CVEs	before 0:8.0.34-1.el8_10	0:8.0.34-1.el8_10
`dotnet-runtime-8.0` Red Hat:enterprise_linux:8::appstream From an advisory covering 7 CVEs	before 0:8.0.34-1.el8_10	0:8.0.34-1.el8_10
`dotnet-runtime-8.0-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 7 CVEs	before 0:8.0.34-1.el8_10	0:8.0.34-1.el8_10
`dotnet-runtime-dbg-8.0` Red Hat:enterprise_linux:8::appstream From an advisory covering 7 CVEs	before 0:8.0.34-1.el8_10	0:8.0.34-1.el8_10
`dotnet-sdk-8.0` Red Hat:enterprise_linux:8::appstream From an advisory covering 7 CVEs	before 0:8.0.134-1.el8_10	0:8.0.134-1.el8_10
`dotnet-sdk-8.0-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 7 CVEs	before 0:8.0.134-1.el8_10	0:8.0.134-1.el8_10
`dotnet-sdk-dbg-8.0` Red Hat:enterprise_linux:8::appstream From an advisory covering 7 CVEs	before 0:8.0.134-1.el8_10	0:8.0.134-1.el8_10
`dotnet-targeting-pack-8.0` Red Hat:enterprise_linux:8::appstream From an advisory covering 7 CVEs	before 0:8.0.34-1.el8_10	0:8.0.34-1.el8_10
`dotnet-templates-8.0` Red Hat:enterprise_linux:8::appstream From an advisory covering 7 CVEs	before 0:8.0.134-1.el8_10	0:8.0.134-1.el8_10
`dotnet8.0` Red Hat:enterprise_linux:8::appstream From an advisory covering 7 CVEs	before 0:8.0.134-1.el8_10	0:8.0.134-1.el8_10
`dotnet8.0-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 7 CVEs	before 0:8.0.134-1.el8_10	0:8.0.134-1.el8_10
`dotnet8.0-debugsource` Red Hat:enterprise_linux:8::appstream From an advisory covering 7 CVEs	before 0:8.0.134-1.el8_10	0:8.0.134-1.el8_10
`dotnet-apphost-pack-8.0-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 7 CVEs	before 0:8.0.34-1.el8_10	0:8.0.34-1.el8_10
`dotnet-hostfxr-8.0-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 7 CVEs	before 0:8.0.34-1.el8_10	0:8.0.34-1.el8_10
`dotnet-runtime-8.0-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 7 CVEs	before 0:8.0.34-1.el8_10	0:8.0.34-1.el8_10
`dotnet-sdk-8.0-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 7 CVEs	before 0:8.0.134-1.el8_10	0:8.0.134-1.el8_10
`dotnet-sdk-8.0-source-built-artifacts` Red Hat:enterprise_linux:8::crb From an advisory covering 7 CVEs	before 0:8.0.134-1.el8_10	0:8.0.134-1.el8_10
`dotnet8.0-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 7 CVEs	before 0:8.0.134-1.el8_10	0:8.0.134-1.el8_10
`dotnet8.0-debugsource` Red Hat:enterprise_linux:8::crb From an advisory covering 7 CVEs	before 0:8.0.134-1.el8_10	0:8.0.134-1.el8_10
`aspnetcore-runtime-10.0` Red Hat:enterprise_linux:8::appstream From an advisory covering 6 CVEs	before 0:10.0.15-1.el8_10	0:10.0.15-1.el8_10
`aspnetcore-runtime-dbg-10.0` Red Hat:enterprise_linux:8::appstream From an advisory covering 6 CVEs	before 0:10.0.15-1.el8_10	0:10.0.15-1.el8_10
`aspnetcore-targeting-pack-10.0` Red Hat:enterprise_linux:8::appstream From an advisory covering 6 CVEs	before 0:10.0.15-1.el8_10	0:10.0.15-1.el8_10
`dotnet-apphost-pack-10.0` Red Hat:enterprise_linux:8::appstream From an advisory covering 6 CVEs	before 0:10.0.15-1.el8_10	0:10.0.15-1.el8_10
`dotnet-apphost-pack-10.0-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 6 CVEs	before 0:10.0.15-1.el8_10	0:10.0.15-1.el8_10
`dotnet-hostfxr-10.0` Red Hat:enterprise_linux:8::appstream From an advisory covering 6 CVEs	before 0:10.0.15-1.el8_10	0:10.0.15-1.el8_10
`dotnet-hostfxr-10.0-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 6 CVEs	before 0:10.0.15-1.el8_10	0:10.0.15-1.el8_10
`dotnet-runtime-10.0` Red Hat:enterprise_linux:8::appstream From an advisory covering 6 CVEs	before 0:10.0.15-1.el8_10	0:10.0.15-1.el8_10
`dotnet-runtime-10.0-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 6 CVEs	before 0:10.0.15-1.el8_10	0:10.0.15-1.el8_10
`dotnet-runtime-dbg-10.0` Red Hat:enterprise_linux:8::appstream From an advisory covering 6 CVEs	before 0:10.0.15-1.el8_10	0:10.0.15-1.el8_10
`dotnet-sdk-10.0` Red Hat:enterprise_linux:8::appstream From an advisory covering 6 CVEs	before 0:10.0.115-1.el8_10	0:10.0.115-1.el8_10
`dotnet-sdk-10.0-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 6 CVEs	before 0:10.0.115-1.el8_10	0:10.0.115-1.el8_10
`dotnet-sdk-aot-10.0` Red Hat:enterprise_linux:8::appstream From an advisory covering 6 CVEs	before 0:10.0.115-1.el8_10	0:10.0.115-1.el8_10
`dotnet-sdk-aot-10.0-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 6 CVEs	before 0:10.0.115-1.el8_10	0:10.0.115-1.el8_10
`dotnet-sdk-dbg-10.0` Red Hat:enterprise_linux:8::appstream From an advisory covering 6 CVEs	before 0:10.0.115-1.el8_10	0:10.0.115-1.el8_10
`dotnet-targeting-pack-10.0` Red Hat:enterprise_linux:8::appstream From an advisory covering 6 CVEs	before 0:10.0.15-1.el8_10	0:10.0.15-1.el8_10
`dotnet-templates-10.0` Red Hat:enterprise_linux:8::appstream From an advisory covering 6 CVEs	before 0:10.0.115-1.el8_10	0:10.0.115-1.el8_10
`dotnet10.0` Red Hat:enterprise_linux:8::appstream From an advisory covering 6 CVEs	before 0:10.0.115-1.el8_10	0:10.0.115-1.el8_10
`dotnet10.0-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 6 CVEs	before 0:10.0.115-1.el8_10	0:10.0.115-1.el8_10
`dotnet10.0-debugsource` Red Hat:enterprise_linux:8::appstream From an advisory covering 6 CVEs	before 0:10.0.115-1.el8_10	0:10.0.115-1.el8_10
`dotnet-apphost-pack-10.0-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 6 CVEs	before 0:10.0.15-1.el8_10	0:10.0.15-1.el8_10
`dotnet-hostfxr-10.0-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 6 CVEs	before 0:10.0.15-1.el8_10	0:10.0.15-1.el8_10
`dotnet-runtime-10.0-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 6 CVEs	before 0:10.0.15-1.el8_10	0:10.0.15-1.el8_10
`dotnet-sdk-10.0-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 6 CVEs	before 0:10.0.115-1.el8_10	0:10.0.115-1.el8_10
`dotnet-sdk-10.0-source-built-artifacts` Red Hat:enterprise_linux:8::crb From an advisory covering 6 CVEs	before 0:10.0.115-1.el8_10	0:10.0.115-1.el8_10
`dotnet-sdk-aot-10.0-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 6 CVEs	before 0:10.0.115-1.el8_10	0:10.0.115-1.el8_10
`dotnet10.0-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 6 CVEs	before 0:10.0.115-1.el8_10	0:10.0.115-1.el8_10
`dotnet10.0-debugsource` Red Hat:enterprise_linux:8::crb From an advisory covering 6 CVEs	before 0:10.0.115-1.el8_10	0:10.0.115-1.el8_10
`aspnetcore-runtime-10.0` Red Hat:enterprise_linux:9::appstream From an advisory covering 6 CVEs	before 0:10.0.15-1.el9_9	0:10.0.15-1.el9_9
`aspnetcore-runtime-dbg-10.0` Red Hat:enterprise_linux:9::appstream From an advisory covering 6 CVEs	before 0:10.0.15-1.el9_9	0:10.0.15-1.el9_9
`aspnetcore-targeting-pack-10.0` Red Hat:enterprise_linux:9::appstream From an advisory covering 6 CVEs	before 0:10.0.15-1.el9_9	0:10.0.15-1.el9_9
`dotnet-apphost-pack-10.0` Red Hat:enterprise_linux:9::appstream From an advisory covering 6 CVEs	before 0:10.0.15-1.el9_9	0:10.0.15-1.el9_9
`dotnet-apphost-pack-10.0-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 6 CVEs	before 0:10.0.15-1.el9_9	0:10.0.15-1.el9_9
`dotnet-hostfxr-10.0` Red Hat:enterprise_linux:9::appstream From an advisory covering 6 CVEs	before 0:10.0.15-1.el9_9	0:10.0.15-1.el9_9
`dotnet-hostfxr-10.0-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 6 CVEs	before 0:10.0.15-1.el9_9	0:10.0.15-1.el9_9
`dotnet-runtime-10.0` Red Hat:enterprise_linux:9::appstream From an advisory covering 6 CVEs	before 0:10.0.15-1.el9_9	0:10.0.15-1.el9_9
`dotnet-runtime-10.0-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 6 CVEs	before 0:10.0.15-1.el9_9	0:10.0.15-1.el9_9
`dotnet-runtime-dbg-10.0` Red Hat:enterprise_linux:9::appstream From an advisory covering 6 CVEs	before 0:10.0.15-1.el9_9	0:10.0.15-1.el9_9
`dotnet-sdk-10.0` Red Hat:enterprise_linux:9::appstream From an advisory covering 6 CVEs	before 0:10.0.115-1.el9_9	0:10.0.115-1.el9_9
`dotnet-sdk-10.0-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 6 CVEs	before 0:10.0.115-1.el9_9	0:10.0.115-1.el9_9
`dotnet-sdk-aot-10.0` Red Hat:enterprise_linux:9::appstream From an advisory covering 6 CVEs	before 0:10.0.115-1.el9_9	0:10.0.115-1.el9_9
`dotnet-sdk-aot-10.0-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 6 CVEs	before 0:10.0.115-1.el9_9	0:10.0.115-1.el9_9
`dotnet-sdk-dbg-10.0` Red Hat:enterprise_linux:9::appstream From an advisory covering 6 CVEs	before 0:10.0.115-1.el9_9	0:10.0.115-1.el9_9
`dotnet-targeting-pack-10.0` Red Hat:enterprise_linux:9::appstream From an advisory covering 6 CVEs	before 0:10.0.15-1.el9_9	0:10.0.15-1.el9_9
`dotnet-templates-10.0` Red Hat:enterprise_linux:9::appstream From an advisory covering 6 CVEs	before 0:10.0.115-1.el9_9	0:10.0.115-1.el9_9
`dotnet10.0` Red Hat:enterprise_linux:9::appstream From an advisory covering 6 CVEs	before 0:10.0.115-1.el9_9	0:10.0.115-1.el9_9
`dotnet10.0-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 6 CVEs	before 0:10.0.115-1.el9_9	0:10.0.115-1.el9_9
`dotnet10.0-debugsource` Red Hat:enterprise_linux:9::appstream From an advisory covering 6 CVEs	before 0:10.0.115-1.el9_9	0:10.0.115-1.el9_9
`dotnet-apphost-pack-10.0-debuginfo` Red Hat:enterprise_linux:9::crb From an advisory covering 6 CVEs	before 0:10.0.15-1.el9_9	0:10.0.15-1.el9_9
`dotnet-hostfxr-10.0-debuginfo` Red Hat:enterprise_linux:9::crb From an advisory covering 6 CVEs	before 0:10.0.15-1.el9_9	0:10.0.15-1.el9_9
`dotnet-runtime-10.0-debuginfo` Red Hat:enterprise_linux:9::crb From an advisory covering 6 CVEs	before 0:10.0.15-1.el9_9	0:10.0.15-1.el9_9
`dotnet-sdk-10.0-debuginfo` Red Hat:enterprise_linux:9::crb From an advisory covering 6 CVEs	before 0:10.0.115-1.el9_9	0:10.0.115-1.el9_9
`dotnet-sdk-10.0-source-built-artifacts` Red Hat:enterprise_linux:9::crb From an advisory covering 6 CVEs	before 0:10.0.115-1.el9_9	0:10.0.115-1.el9_9
`dotnet-sdk-aot-10.0-debuginfo` Red Hat:enterprise_linux:9::crb From an advisory covering 6 CVEs	before 0:10.0.115-1.el9_9	0:10.0.115-1.el9_9
`dotnet10.0-debuginfo` Red Hat:enterprise_linux:9::crb From an advisory covering 6 CVEs	before 0:10.0.115-1.el9_9	0:10.0.115-1.el9_9
`dotnet10.0-debugsource` Red Hat:enterprise_linux:9::crb From an advisory covering 6 CVEs	before 0:10.0.115-1.el9_9	0:10.0.115-1.el9_9
`aspnetcore-runtime-10.0` Red Hat:enterprise_linux:10.3 From an advisory covering 6 CVEs	before 0:10.0.15-1.el10_3	0:10.0.15-1.el10_3
`aspnetcore-runtime-dbg-10.0` Red Hat:enterprise_linux:10.3 From an advisory covering 6 CVEs	before 0:10.0.15-1.el10_3	0:10.0.15-1.el10_3
`aspnetcore-targeting-pack-10.0` Red Hat:enterprise_linux:10.3 From an advisory covering 6 CVEs	before 0:10.0.15-1.el10_3	0:10.0.15-1.el10_3
`dotnet-apphost-pack-10.0` Red Hat:enterprise_linux:10.3 From an advisory covering 6 CVEs	before 0:10.0.15-1.el10_3	0:10.0.15-1.el10_3
`dotnet-apphost-pack-10.0-debuginfo` Red Hat:enterprise_linux:10.3 From an advisory covering 6 CVEs	before 0:10.0.15-1.el10_3	0:10.0.15-1.el10_3
`dotnet-hostfxr-10.0` Red Hat:enterprise_linux:10.3 From an advisory covering 6 CVEs	before 0:10.0.15-1.el10_3	0:10.0.15-1.el10_3
`dotnet-hostfxr-10.0-debuginfo` Red Hat:enterprise_linux:10.3 From an advisory covering 6 CVEs	before 0:10.0.15-1.el10_3	0:10.0.15-1.el10_3
`aspnetcore-runtime-9.0` Rocky Linux:8 From an advisory covering 6 CVEs	before 0:9.0.23-1.el8_10	0:9.0.23-1.el8_10
`aspnetcore-runtime-dbg-9.0` Rocky Linux:8 From an advisory covering 6 CVEs	before 0:9.0.23-1.el8_10	0:9.0.23-1.el8_10
`aspnetcore-targeting-pack-9.0` Rocky Linux:8 From an advisory covering 6 CVEs	before 0:9.0.23-1.el8_10	0:9.0.23-1.el8_10
`dotnet9.0-debuginfo` Rocky Linux:8 From an advisory covering 6 CVEs	before 0:9.0.124-1.el8_10	0:9.0.124-1.el8_10
`dotnet9.0-debugsource` Rocky Linux:8 From an advisory covering 6 CVEs	before 0:9.0.124-1.el8_10	0:9.0.124-1.el8_10
`dotnet-apphost-pack-9.0` Rocky Linux:8 From an advisory covering 6 CVEs	before 0:9.0.23-1.el8_10	0:9.0.23-1.el8_10
`dotnet-apphost-pack-9.0-debuginfo` Rocky Linux:8 From an advisory covering 6 CVEs	before 0:9.0.23-1.el8_10	0:9.0.23-1.el8_10
`dotnet-hostfxr-9.0` Rocky Linux:8 From an advisory covering 6 CVEs	before 0:9.0.23-1.el8_10	0:9.0.23-1.el8_10
`dotnet-hostfxr-9.0-debuginfo` Rocky Linux:8 From an advisory covering 6 CVEs	before 0:9.0.23-1.el8_10	0:9.0.23-1.el8_10
`dotnet-runtime-9.0` Rocky Linux:8 From an advisory covering 6 CVEs	before 0:9.0.23-1.el8_10	0:9.0.23-1.el8_10
`dotnet-runtime-9.0-debuginfo` Rocky Linux:8 From an advisory covering 6 CVEs	before 0:9.0.23-1.el8_10	0:9.0.23-1.el8_10
`dotnet-runtime-dbg-9.0` Rocky Linux:8 From an advisory covering 6 CVEs	before 0:9.0.23-1.el8_10	0:9.0.23-1.el8_10
`dotnet-sdk-9.0` Rocky Linux:8 From an advisory covering 6 CVEs	before 0:9.0.124-1.el8_10	0:9.0.124-1.el8_10
`dotnet-sdk-9.0-debuginfo` Rocky Linux:8 From an advisory covering 6 CVEs	before 0:9.0.124-1.el8_10	0:9.0.124-1.el8_10
`dotnet-sdk-9.0-source-built-artifacts` Rocky Linux:8 From an advisory covering 6 CVEs	before 0:9.0.124-1.el8_10	0:9.0.124-1.el8_10
`dotnet-sdk-aot-9.0` Rocky Linux:8 From an advisory covering 6 CVEs	before 0:9.0.124-1.el8_10	0:9.0.124-1.el8_10
`dotnet-sdk-aot-9.0-debuginfo` Rocky Linux:8 From an advisory covering 6 CVEs	before 0:9.0.124-1.el8_10	0:9.0.124-1.el8_10
`dotnet-sdk-dbg-9.0` Rocky Linux:8 From an advisory covering 6 CVEs	before 0:9.0.124-1.el8_10	0:9.0.124-1.el8_10
`dotnet-targeting-pack-9.0` Rocky Linux:8 From an advisory covering 6 CVEs	before 0:9.0.23-1.el8_10	0:9.0.23-1.el8_10
`dotnet-templates-9.0` Rocky Linux:8 From an advisory covering 6 CVEs	before 0:9.0.124-1.el8_10	0:9.0.124-1.el8_10
`netstandard-targeting-pack-2.1` Rocky Linux:8 From an advisory covering 6 CVEs	before 0:9.0.124-1.el8_10	0:9.0.124-1.el8_10
`aspnetcore-runtime-8.0` Rocky Linux:8 From an advisory covering 7 CVEs	before 0:8.0.34-1.el8_10	0:8.0.34-1.el8_10
`aspnetcore-runtime-dbg-8.0` Rocky Linux:8 From an advisory covering 7 CVEs	before 0:8.0.34-1.el8_10	0:8.0.34-1.el8_10
`aspnetcore-targeting-pack-8.0` Rocky Linux:8 From an advisory covering 7 CVEs	before 0:8.0.34-1.el8_10	0:8.0.34-1.el8_10
`dotnet8.0-debuginfo` Rocky Linux:8 From an advisory covering 7 CVEs	before 0:8.0.134-1.el8_10	0:8.0.134-1.el8_10
`dotnet8.0-debugsource` Rocky Linux:8 From an advisory covering 7 CVEs	before 0:8.0.134-1.el8_10	0:8.0.134-1.el8_10
`dotnet-apphost-pack-8.0` Rocky Linux:8 From an advisory covering 7 CVEs	before 0:8.0.34-1.el8_10	0:8.0.34-1.el8_10
`dotnet-apphost-pack-8.0-debuginfo` Rocky Linux:8 From an advisory covering 7 CVEs	before 0:8.0.34-1.el8_10	0:8.0.34-1.el8_10
`dotnet-hostfxr-8.0` Rocky Linux:8 From an advisory covering 7 CVEs	before 0:8.0.34-1.el8_10	0:8.0.34-1.el8_10
`dotnet-hostfxr-8.0-debuginfo` Rocky Linux:8 From an advisory covering 7 CVEs	before 0:8.0.34-1.el8_10	0:8.0.34-1.el8_10
`dotnet-runtime-8.0` Rocky Linux:8 From an advisory covering 7 CVEs	before 0:8.0.34-1.el8_10	0:8.0.34-1.el8_10
`dotnet-runtime-8.0-debuginfo` Rocky Linux:8 From an advisory covering 7 CVEs	before 0:8.0.34-1.el8_10	0:8.0.34-1.el8_10
`dotnet-runtime-dbg-8.0` Rocky Linux:8 From an advisory covering 7 CVEs	before 0:8.0.34-1.el8_10	0:8.0.34-1.el8_10
`dotnet-sdk-8.0` Rocky Linux:8 From an advisory covering 7 CVEs	before 0:8.0.134-1.el8_10	0:8.0.134-1.el8_10
`dotnet-sdk-8.0-debuginfo` Rocky Linux:8 From an advisory covering 7 CVEs	before 0:8.0.134-1.el8_10	0:8.0.134-1.el8_10
`dotnet-sdk-8.0-source-built-artifacts` Rocky Linux:8 From an advisory covering 7 CVEs	before 0:8.0.134-1.el8_10	0:8.0.134-1.el8_10
`dotnet-sdk-dbg-8.0` Rocky Linux:8 From an advisory covering 7 CVEs	before 0:8.0.134-1.el8_10	0:8.0.134-1.el8_10
`dotnet-targeting-pack-8.0` Rocky Linux:8 From an advisory covering 7 CVEs	before 0:8.0.34-1.el8_10	0:8.0.34-1.el8_10
`dotnet-templates-8.0` Rocky Linux:8 From an advisory covering 7 CVEs	before 0:8.0.134-1.el8_10	0:8.0.134-1.el8_10
`aspnetcore-runtime-10.0` Rocky Linux:8 From an advisory covering 6 CVEs	before 0:10.0.15-1.el8_10	0:10.0.15-1.el8_10
`aspnetcore-runtime-dbg-10.0` Rocky Linux:8 From an advisory covering 6 CVEs	before 0:10.0.15-1.el8_10	0:10.0.15-1.el8_10
`aspnetcore-targeting-pack-10.0` Rocky Linux:8 From an advisory covering 6 CVEs	before 0:10.0.15-1.el8_10	0:10.0.15-1.el8_10
`dotnet10.0-debuginfo` Rocky Linux:8 From an advisory covering 6 CVEs	before 0:10.0.115-1.el8_10	0:10.0.115-1.el8_10
`dotnet10.0-debugsource` Rocky Linux:8 From an advisory covering 6 CVEs	before 0:10.0.115-1.el8_10	0:10.0.115-1.el8_10
`dotnet-apphost-pack-10.0` Rocky Linux:8 From an advisory covering 6 CVEs	before 0:10.0.15-1.el8_10	0:10.0.15-1.el8_10
`dotnet-apphost-pack-10.0-debuginfo` Rocky Linux:8 From an advisory covering 6 CVEs	before 0:10.0.15-1.el8_10	0:10.0.15-1.el8_10
`dotnet-hostfxr-10.0` Rocky Linux:8 From an advisory covering 6 CVEs	before 0:10.0.15-1.el8_10	0:10.0.15-1.el8_10
`dotnet-hostfxr-10.0-debuginfo` Rocky Linux:8 From an advisory covering 6 CVEs	before 0:10.0.15-1.el8_10	0:10.0.15-1.el8_10
`dotnet-runtime-10.0` Rocky Linux:8 From an advisory covering 6 CVEs	before 0:10.0.15-1.el8_10	0:10.0.15-1.el8_10
`dotnet-runtime-10.0-debuginfo` Rocky Linux:8 From an advisory covering 6 CVEs	before 0:10.0.15-1.el8_10	0:10.0.15-1.el8_10
`dotnet-runtime-dbg-10.0` Rocky Linux:8 From an advisory covering 6 CVEs	before 0:10.0.15-1.el8_10	0:10.0.15-1.el8_10
`dotnet-sdk-10.0` Rocky Linux:8 From an advisory covering 6 CVEs	before 0:10.0.115-1.el8_10	0:10.0.115-1.el8_10
`dotnet-sdk-10.0-debuginfo` Rocky Linux:8 From an advisory covering 6 CVEs	before 0:10.0.115-1.el8_10	0:10.0.115-1.el8_10
`dotnet-sdk-10.0-source-built-artifacts` Rocky Linux:8 From an advisory covering 6 CVEs	before 0:10.0.115-1.el8_10	0:10.0.115-1.el8_10
`dotnet-sdk-aot-10.0` Rocky Linux:8 From an advisory covering 6 CVEs	before 0:10.0.115-1.el8_10	0:10.0.115-1.el8_10
`dotnet-sdk-aot-10.0-debuginfo` Rocky Linux:8 From an advisory covering 6 CVEs	before 0:10.0.115-1.el8_10	0:10.0.115-1.el8_10
`dotnet-sdk-dbg-10.0` Rocky Linux:8 From an advisory covering 6 CVEs	before 0:10.0.115-1.el8_10	0:10.0.115-1.el8_10
`dotnet-targeting-pack-10.0` Rocky Linux:8 From an advisory covering 6 CVEs	before 0:10.0.15-1.el8_10	0:10.0.15-1.el8_10
`dotnet-templates-10.0` Rocky Linux:8 From an advisory covering 6 CVEs	before 0:10.0.115-1.el8_10	0:10.0.115-1.el8_10
`dotnet6` Ubuntu:22.04:LTS	All versions, plus listed versions 6.0.108-0ubuntu1~22.04.16.0.109-0ubuntu1~22.04.16.0.110-0ubuntu1~22.04.16.0.111-0ubuntu1~22.04.16.0.113-0ubuntu1~22.04.1 Show 16 moreShow less 6.0.116-0ubuntu1~22.04.16.0.118-0ubuntu1~22.04.16.0.119-0ubuntu1~22.04.16.0.120-0ubuntu1~22.04.16.0.121-0ubuntu1~22.04.16.0.122-0ubuntu1~22.04.16.0.123-0ubuntu1~22.04.16.0.124-0ubuntu1~22.04.16.0.125-0ubuntu1~22.04.16.0.126-0ubuntu1~22.04.16.0.127-0ubuntu1~22.04.16.0.128-0ubuntu1~22.04.26.0.132-0ubuntu1~22.04.16.0.133-0ubuntu1~22.04.16.0.135-0ubuntu1~22.04.16.0.136-0ubuntu1~22.04.1	None known
`dotnet7` Ubuntu:22.04:LTS	All versions, plus listed versions 7.0.105-0ubuntu1~22.04.17.0.107-0ubuntu1~22.04.17.0.108-0ubuntu1~22.04.17.0.109-0ubuntu1~22.04.17.0.110-0ubuntu1~22.04.1 Show 9 moreShow less 7.0.111-0ubuntu1~22.04.17.0.112-0ubuntu1~22.04.17.0.113-0ubuntu1~22.04.17.0.114-0ubuntu1~22.04.17.0.115-0ubuntu1~22.04.17.0.116-0ubuntu1~22.04.17.0.117-0ubuntu1~22.04.17.0.117-0ubuntu1~22.04.27.0.119-0ubuntu1~22.04.1	None known
`dotnet8` Ubuntu:22.04:LTS	before 8.0.134-8.0.34-0ubuntu1~22.04.1, plus listed versions 8.0.102-8.0.2-0ubuntu1~22.04.18.0.103-8.0.3-0ubuntu1~22.04.18.0.103-8.0.3-0ubuntu1~22.04.28.0.105-8.0.5-0ubuntu1~22.04.18.0.107-8.0.7-0ubuntu1~22.04.1 Show 24 moreShow less 8.0.108-8.0.8-0ubuntu1~22.04.18.0.110-8.0.10-0ubuntu1~22.04.18.0.111-8.0.11-0ubuntu1~22.04.18.0.112-8.0.12-0ubuntu1~22.04.18.0.114-8.0.14-0ubuntu1~22.04.18.0.115-8.0.15-0ubuntu1~22.04.18.0.116-8.0.16-0ubuntu1~22.04.18.0.117-8.0.17-0ubuntu1~22.04.18.0.118-8.0.18-0ubuntu1~22.04.18.0.119-8.0.19-0ubuntu1~22.04.18.0.120-8.0.20-0ubuntu1~22.04.18.0.121-8.0.21-0ubuntu1~22.04.18.0.122-8.0.22-0ubuntu1~22.04.18.0.123-8.0.23-0ubuntu1~22.04.18.0.124-8.0.24-0ubuntu1~22.04.18.0.125-8.0.25-0ubuntu1~22.04.18.0.126-8.0.26-0ubuntu1~22.04.18.0.127-8.0.27-0ubuntu1~22.04.18.0.128-8.0.28-0ubuntu1~22.04.18.0.129-8.0.29-0ubuntu1~22.04.18.0.130-8.0.30-0ubuntu1~22.04.18.0.131-8.0.31-0ubuntu1~22.04.18.0.132-8.0.32-0ubuntu1~22.04.18.0.133-8.0.33-0ubuntu1~22.04.1	8.0.134-8.0.34-0ubuntu1~22.04.1
`dotnet10` Ubuntu:24.04:LTS	before 10.0.115-10.0.15-0ubuntu1~24.04.1, plus listed versions 10.0.100-10.0.0-0ubuntu1~24.04.110.0.101-10.0.1-0ubuntu1~24.04.210.0.103-10.0.3-0ubuntu1~24.04.110.0.104-10.0.4-0ubuntu1~24.04.110.0.105-10.0.5-0ubuntu1~24.04.1 Show 9 moreShow less 10.0.106-10.0.6-0ubuntu1~24.04.110.0.107-10.0.7-0ubuntu1~24.04.110.0.108-10.0.8-0ubuntu1~24.04.110.0.109-10.0.9-0ubuntu1~24.04.110.0.110-10.0.10-0ubuntu1~24.04.110.0.111-10.0.11-0ubuntu1~24.04.110.0.112-10.0.12-0ubuntu1~24.04.110.0.113-10.0.13-0ubuntu1~24.04.110.0.114-10.0.14-0ubuntu1~24.04.1	10.0.115-10.0.15-0ubuntu1~24.04.1
`dotnet8` Ubuntu:24.04:LTS	before 8.0.134-8.0.34-0ubuntu1~24.04.1, plus listed versions 8.0.100-8.0.0~rc1-0ubuntu18.0.100-8.0.0~rc2-0ubuntu18.0.100-8.0.0~rc2-0ubuntu28.0.100-8.0.0-0ubuntu18.0.100-8.0.0-0ubuntu2 Show 33 moreShow less 8.0.101-8.0.1-0ubuntu18.0.101-8.0.1-0ubuntu28.0.102-8.0.2-0ubuntu18.0.103-8.0.3-0ubuntu28.0.103-8.0.3-0ubuntu38.0.104-8.0.4-0ubuntu18.0.105-8.0.5-0ubuntu1~24.04.18.0.107-8.0.7-0ubuntu1~24.04.18.0.108-8.0.8-0ubuntu1~24.04.18.0.108-8.0.8-0ubuntu1~24.04.28.0.110-8.0.10-0ubuntu1~24.04.18.0.111-8.0.11-0ubuntu1~24.04.18.0.112-8.0.12-0ubuntu1~24.04.18.0.114-8.0.14-0ubuntu1~24.04.18.0.115-8.0.15-0ubuntu1~24.04.18.0.116-8.0.16-0ubuntu1~24.04.18.0.117-8.0.17-0ubuntu1~24.04.18.0.118-8.0.18-0ubuntu1~24.04.18.0.119-8.0.19-0ubuntu1~24.04.18.0.120-8.0.20-0ubuntu1~24.04.18.0.121-8.0.21-0ubuntu1~24.04.18.0.122-8.0.22-0ubuntu1~24.04.18.0.123-8.0.23-0ubuntu1~24.04.18.0.124-8.0.24-0ubuntu1~24.04.18.0.125-8.0.25-0ubuntu1~24.04.18.0.126-8.0.26-0ubuntu1~24.04.18.0.127-8.0.27-0ubuntu1~24.04.18.0.128-8.0.28-0ubuntu1~24.04.18.0.129-8.0.29-0ubuntu1~24.04.18.0.130-8.0.30-0ubuntu1~24.04.18.0.131-8.0.31-0ubuntu1~24.04.18.0.132-8.0.32-0ubuntu1~24.04.18.0.133-8.0.33-0ubuntu1~24.04.1	8.0.134-8.0.34-0ubuntu1~24.04.1
`dotnet10` Ubuntu:26.10	before 10.0.115-10.0.15-0ubuntu1~26.10.1, plus listed versions 10.0.105-10.0.5-0ubuntu110.0.107-10.0.7-0ubuntu1~26.04.110.0.108-10.0.8-0ubuntu110.0.109-10.0.9-0ubuntu110.0.110-10.0.10-0ubuntu3 Show 5 moreShow less 10.0.111-10.0.11-0ubuntu110.0.112-10.0.12-0ubuntu110.0.112-10.0.12-0ubuntu210.0.113-10.0.13-0ubuntu1~26.10.110.0.114-10.0.14-0ubuntu1~26.10.1	10.0.115-10.0.15-0ubuntu1~26.10.1
`dotnet11` Ubuntu:26.10	before 11.0.100-11.0.0-0ubuntu1~26.10.1, plus listed versions 11.0.100-11.0.0~rc1-0ubuntu111.0.100-11.0.0~rc2-0ubuntu1~26.10.111.0.100-11.0.0~rc3-0ubuntu1~26.10.1	11.0.100-11.0.0-0ubuntu1~26.10.1
`dotnet10` Ubuntu:26.04:LTS	before 10.0.115-10.0.15-0ubuntu1~26.04.1, plus listed versions 10.0.100-10.0.0~rc1-0ubuntu110.0.100-10.0.0~rc2-0ubuntu110.0.100-10.0.0-0ubuntu110.0.100-10.0.0-0ubuntu210.0.101-10.0.1-0ubuntu1 Show 14 moreShow less 10.0.101-10.0.1-0ubuntu210.0.101-10.0.1-0ubuntu310.0.102-10.0.2-0ubuntu110.0.103-10.0.3-0ubuntu110.0.104-10.0.4-0ubuntu110.0.105-10.0.5-0ubuntu110.0.107-10.0.7-0ubuntu1~26.04.110.0.108-10.0.8-0ubuntu1~26.04.110.0.109-10.0.9-0ubuntu1~26.04.110.0.110-10.0.10-0ubuntu1~26.04.110.0.111-10.0.11-0ubuntu1~26.04.110.0.112-10.0.12-0ubuntu1~26.04.110.0.113-10.0.13-0ubuntu1~26.04.110.0.114-10.0.14-0ubuntu1~26.04.1	10.0.115-10.0.15-0ubuntu1~26.04.1
`dotnet8` Ubuntu:22.04:LTS From an advisory covering 15 CVEs	before 8.0.134-8.0.34-0ubuntu1~22.04.1, plus listed versions 8.0.102-8.0.2-0ubuntu1~22.04.18.0.103-8.0.3-0ubuntu1~22.04.18.0.103-8.0.3-0ubuntu1~22.04.28.0.105-8.0.5-0ubuntu1~22.04.18.0.107-8.0.7-0ubuntu1~22.04.1 Show 24 moreShow less 8.0.108-8.0.8-0ubuntu1~22.04.18.0.110-8.0.10-0ubuntu1~22.04.18.0.111-8.0.11-0ubuntu1~22.04.18.0.112-8.0.12-0ubuntu1~22.04.18.0.114-8.0.14-0ubuntu1~22.04.18.0.115-8.0.15-0ubuntu1~22.04.18.0.116-8.0.16-0ubuntu1~22.04.18.0.117-8.0.17-0ubuntu1~22.04.18.0.118-8.0.18-0ubuntu1~22.04.18.0.119-8.0.19-0ubuntu1~22.04.18.0.120-8.0.20-0ubuntu1~22.04.18.0.121-8.0.21-0ubuntu1~22.04.18.0.122-8.0.22-0ubuntu1~22.04.18.0.123-8.0.23-0ubuntu1~22.04.18.0.124-8.0.24-0ubuntu1~22.04.18.0.125-8.0.25-0ubuntu1~22.04.18.0.126-8.0.26-0ubuntu1~22.04.18.0.127-8.0.27-0ubuntu1~22.04.18.0.128-8.0.28-0ubuntu1~22.04.18.0.129-8.0.29-0ubuntu1~22.04.18.0.130-8.0.30-0ubuntu1~22.04.18.0.131-8.0.31-0ubuntu1~22.04.18.0.132-8.0.32-0ubuntu1~22.04.18.0.133-8.0.33-0ubuntu1~22.04.1	8.0.134-8.0.34-0ubuntu1~22.04.1
`dotnet10` Ubuntu:24.04:LTS From an advisory covering 15 CVEs	before 10.0.115-10.0.15-0ubuntu1~24.04.1, plus listed versions 10.0.100-10.0.0-0ubuntu1~24.04.110.0.101-10.0.1-0ubuntu1~24.04.210.0.103-10.0.3-0ubuntu1~24.04.110.0.104-10.0.4-0ubuntu1~24.04.110.0.105-10.0.5-0ubuntu1~24.04.1 Show 9 moreShow less 10.0.106-10.0.6-0ubuntu1~24.04.110.0.107-10.0.7-0ubuntu1~24.04.110.0.108-10.0.8-0ubuntu1~24.04.110.0.109-10.0.9-0ubuntu1~24.04.110.0.110-10.0.10-0ubuntu1~24.04.110.0.111-10.0.11-0ubuntu1~24.04.110.0.112-10.0.12-0ubuntu1~24.04.110.0.113-10.0.13-0ubuntu1~24.04.110.0.114-10.0.14-0ubuntu1~24.04.1	10.0.115-10.0.15-0ubuntu1~24.04.1
`dotnet8` Ubuntu:24.04:LTS From an advisory covering 15 CVEs	before 8.0.134-8.0.34-0ubuntu1~24.04.1, plus listed versions 8.0.100-8.0.0~rc1-0ubuntu18.0.100-8.0.0~rc2-0ubuntu18.0.100-8.0.0~rc2-0ubuntu28.0.100-8.0.0-0ubuntu18.0.100-8.0.0-0ubuntu2 Show 33 moreShow less 8.0.101-8.0.1-0ubuntu18.0.101-8.0.1-0ubuntu28.0.102-8.0.2-0ubuntu18.0.103-8.0.3-0ubuntu28.0.103-8.0.3-0ubuntu38.0.104-8.0.4-0ubuntu18.0.105-8.0.5-0ubuntu1~24.04.18.0.107-8.0.7-0ubuntu1~24.04.18.0.108-8.0.8-0ubuntu1~24.04.18.0.108-8.0.8-0ubuntu1~24.04.28.0.110-8.0.10-0ubuntu1~24.04.18.0.111-8.0.11-0ubuntu1~24.04.18.0.112-8.0.12-0ubuntu1~24.04.18.0.114-8.0.14-0ubuntu1~24.04.18.0.115-8.0.15-0ubuntu1~24.04.18.0.116-8.0.16-0ubuntu1~24.04.18.0.117-8.0.17-0ubuntu1~24.04.18.0.118-8.0.18-0ubuntu1~24.04.18.0.119-8.0.19-0ubuntu1~24.04.18.0.120-8.0.20-0ubuntu1~24.04.18.0.121-8.0.21-0ubuntu1~24.04.18.0.122-8.0.22-0ubuntu1~24.04.18.0.123-8.0.23-0ubuntu1~24.04.18.0.124-8.0.24-0ubuntu1~24.04.18.0.125-8.0.25-0ubuntu1~24.04.18.0.126-8.0.26-0ubuntu1~24.04.18.0.127-8.0.27-0ubuntu1~24.04.18.0.128-8.0.28-0ubuntu1~24.04.18.0.129-8.0.29-0ubuntu1~24.04.18.0.130-8.0.30-0ubuntu1~24.04.18.0.131-8.0.31-0ubuntu1~24.04.18.0.132-8.0.32-0ubuntu1~24.04.18.0.133-8.0.33-0ubuntu1~24.04.1	8.0.134-8.0.34-0ubuntu1~24.04.1
`dotnet10` Ubuntu:26.10 From an advisory covering 15 CVEs	before 10.0.115-10.0.15-0ubuntu1~26.10.1, plus listed versions 10.0.105-10.0.5-0ubuntu110.0.107-10.0.7-0ubuntu1~26.04.110.0.108-10.0.8-0ubuntu110.0.109-10.0.9-0ubuntu110.0.110-10.0.10-0ubuntu3 Show 5 moreShow less 10.0.111-10.0.11-0ubuntu110.0.112-10.0.12-0ubuntu110.0.112-10.0.12-0ubuntu210.0.113-10.0.13-0ubuntu1~26.10.110.0.114-10.0.14-0ubuntu1~26.10.1	10.0.115-10.0.15-0ubuntu1~26.10.1
`dotnet11` Ubuntu:26.10 From an advisory covering 15 CVEs	before 11.0.100-11.0.0-0ubuntu1~26.10.1, plus listed versions 11.0.100-11.0.0~rc1-0ubuntu111.0.100-11.0.0~rc2-0ubuntu1~26.10.111.0.100-11.0.0~rc3-0ubuntu1~26.10.1	11.0.100-11.0.0-0ubuntu1~26.10.1
`dotnet10` Ubuntu:26.04:LTS From an advisory covering 15 CVEs	before 10.0.115-10.0.15-0ubuntu1~26.04.1, plus listed versions 10.0.100-10.0.0~rc1-0ubuntu110.0.100-10.0.0~rc2-0ubuntu110.0.100-10.0.0-0ubuntu110.0.100-10.0.0-0ubuntu210.0.101-10.0.1-0ubuntu1 Show 14 moreShow less 10.0.101-10.0.1-0ubuntu210.0.101-10.0.1-0ubuntu310.0.102-10.0.2-0ubuntu110.0.103-10.0.3-0ubuntu110.0.104-10.0.4-0ubuntu110.0.105-10.0.5-0ubuntu110.0.107-10.0.7-0ubuntu1~26.04.110.0.108-10.0.8-0ubuntu1~26.04.110.0.109-10.0.9-0ubuntu1~26.04.110.0.110-10.0.10-0ubuntu1~26.04.110.0.111-10.0.11-0ubuntu1~26.04.110.0.112-10.0.12-0ubuntu1~26.04.110.0.113-10.0.13-0ubuntu1~26.04.110.0.114-10.0.14-0ubuntu1~26.04.1	10.0.115-10.0.15-0ubuntu1~26.04.1

What each source reports

CVE List Score used7.5

.NET Denial of Service Vulnerability

Stack-based buffer overflow in .NET allows an unauthorized attacker to deny service over a network.

Record: CVE-2026-109475
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
Weakness: CWE-121
Updated: 2026-11-11

EUVDEUVD-2026-1215597.5

Stack-based buffer overflow in .NET allows an unauthorized attacker to deny service over a network.

Record: EUVD-2026-121559
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
Updated: 2026-11-11

GitHub AdvisoriesGHSA-3g4v-f5gv-c7xf6.5

Microsoft Security Advisory CVE-2026-109475 - .NET Denial of Service Vulnerability

Executive summary

Microsoft is releasing this security advisory to provide information about a vulnerability in .NET. This advisory provides guidance on updating affected applications and components.

Managed HttpListener can recursively process an unterminated request line and exhaust the process stack.

Announcement

Announcement for this issue can be found at https://github.com/dotnet/announcements/issues/500

CVSS Details

Version: 3.1
Severity: High
Score: 7.5 (base score)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
Weakness: CWE-121

Affected Platforms

Platforms: Linux, macOS
Architectures: All

<a name="affected-packages"></a>Affected Packages

The tables list affected version ranges and fixed package versions. Runtime and standalone deliveries are listed separately.

.NET 8.0 - affected runtime packages

Package | Affected version | Patched version --- | --- | --- Microsoft.NETCore.App.Runtime.linux-arm | >= 8.0.0-0, <= 8.0.33 | 8.0.34 Microsoft.NETCore.App.Runtime.linux-arm64 | >= 8.0.0-0, <= 8.0.33 | 8.0.34 Microsoft.NETCore.App.Runtime.linux-musl-arm | >= 8.0.0-0, <= 8.0.33 | 8.0.34 Microsoft.NETCore.App.Runtime.linux-musl-arm64 | >= 8.0.0-0, <= 8.0.33 | 8.0.34 Microsoft.NETCore.App.Runtime.linux-musl-x64 | >= 8.0.0-0, <= 8.0.33 | 8.0.34 Microsoft.NETCore.App.Runtime.linux-x64 | >= 8.0.0-0, <= 8.0.33 | 8.0.34 Microsoft.NETCore.App.Runtime.osx-arm64 | >= 8.0.0-0, <= 8.0.33 | 8.0.34 Microsoft.NETCore.App.Runtime.osx-x64 | >= 8.0.0-0, <= 8.0.33 | 8.0.34

.NET 9.0 - affected runtime packages

Package | Affected version | Patched version --- | --- | --- Microsoft.NETCore.App.Runtime.linux-arm | >= 9.0.0-0, <= 9.0.22 | 9.0.23 Microsoft.NETCore.App.Runtime.linux-arm64 | >= 9.0.0-0, <= 9.0.22 | 9.0.23 Microsoft.NETCore.App.Runtime.linux-musl-arm | >= 9.0.0-0, <= 9.0.22 | 9.0.23 Microsoft.NETCore.App.Runtime.linux-musl-arm64 | >= 9.0.0-0, <= 9.0.22 | 9.0.23 Microsoft.NETCore.App.Runtime.linux-musl-x64 | >= 9.0.0-0, <= 9.0.22 | 9.0.23 Microsoft.NETCore.App.Runtime.linux-x64 | >= 9.0.0-0, <= 9.0.22 | 9.0.23 Microsoft.NETCore.App.Runtime.osx-arm64 | >= 9.0.0-0, <= 9.0.22 | 9.0.23 Microsoft.NETCore.App.Runtime.osx-x64 | >= 9.0.0-0, <= 9.0.22 | 9.0.23

.NET 10.0 - affected runtime packages

Package | Affected version | Patched version --- | --- | --- Microsoft.NETCore.App.Runtime.linux-arm | >= 10.0.0-0, <= 10.0.14 | 10.0.15 Microsoft.NETCore.App.Runtime.linux-arm64 | >= 10.0.0-0, <= 10.0.14 | 10.0.15…

Record: GHSA-3g4v-f5gv-c7xf
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
Weakness: CWE-121
Updated: 2026-11-10

NVD7.5

Stack-based buffer overflow in .NET allows an unauthorized attacker to deny service over a network.

Record: CVE-2026-109475
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness: CWE-121
Updated: 2026-11-11

OSVALPINE-CVE-2026-1094757.5

Stack-based buffer overflow in .NET allows an unauthorized attacker to deny service over a network.

Record: ALPINE-CVE-2026-109475
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-13

OSVGHSA-3g4v-f5gv-c7xf7.5

Microsoft Security Advisory CVE-2026-109475 - .NET Denial of Service Vulnerability

Executive summary

Microsoft is releasing this security advisory to provide information about a vulnerability in .NET. This advisory provides guidance on updating affected applications and components.

Managed HttpListener can recursively process an unterminated request line and exhaust the process stack.

Announcement

Announcement for this issue can be found at https://github.com/dotnet/announcements/issues/500

CVSS Details

Version: 3.1
Severity: High
Score: 7.5 (base score)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
Weakness: CWE-121

Affected Platforms

Platforms: Linux, macOS
Architectures: All

<a name="affected-packages"></a>Affected Packages

The tables list affected version ranges and fixed package versions. Runtime and standalone deliveries are listed separately.

.NET 8.0 - affected runtime packages

.NET 9.0 - affected runtime packages

.NET 10.0 - affected runtime packages

Record: GHSA-3g4v-f5gv-c7xf
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
Weakness: CWE-121
Updated: 2026-11-11

Show 17 moreShow less

OSVRHSA-2026:990519.0

Red Hat Security Advisory: .NET 9.0 security, bug fix, and enhancement update

Record: RHSA-2026:99051
CVSS 3.1: 9.0 CriticalCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C
Updated: 2026-11-13

OSVRHSA-2026:990529.0

Red Hat Security Advisory: .NET 8.0 security, bug fix, and enhancement update

Record: RHSA-2026:99052
CVSS 3.1: 9.0 CriticalCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C
Updated: 2026-11-13

OSVRHSA-2026:990539.0

Red Hat Security Advisory: .NET 10.0 security, bug fix, and enhancement update

Record: RHSA-2026:99053
CVSS 3.1: 9.0 CriticalCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C
Updated: 2026-11-13

OSVRHSA-2026:991429.0

Red Hat Security Advisory: .NET 10.0 security, bug fix, and enhancement update

Record: RHSA-2026:99142
CVSS 3.1: 9.0 CriticalCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C
Updated: 2026-11-13

OSVRHSA-2026:991439.0

Red Hat Security Advisory: .NET 10.0 security, bug fix, and enhancement update

Record: RHSA-2026:99143
CVSS 3.1: 9.0 CriticalCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C
Updated: 2026-11-13

OSVRHSA-2026:991449.0

Red Hat Security Advisory: .NET 9.0 security, bug fix, and enhancement update

Record: RHSA-2026:99144
CVSS 3.1: 9.0 CriticalCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C
Updated: 2026-11-13

OSVRHSA-2026:991459.0

Red Hat Security Advisory: .NET 9.0 security, bug fix, and enhancement update

Record: RHSA-2026:99145
CVSS 3.1: 9.0 CriticalCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C
Updated: 2026-11-13

OSVRHSA-2026:991469.0

Red Hat Security Advisory: .NET 8.0 security, bug fix, and enhancement update

Record: RHSA-2026:99146
CVSS 3.1: 9.0 CriticalCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C
Updated: 2026-11-13

OSVRHSA-2026:991479.0

Red Hat Security Advisory: .NET 8.0 security, bug fix, and enhancement update

Record: RHSA-2026:99147
CVSS 3.1: 9.0 CriticalCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C
Updated: 2026-11-13

OSVRLSA-2026:990519.0

Important: .NET 9.0 security, bug fix, and enhancement update

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything.

SDK version: 9.0.124 Runtime version: 9.0.23

Security Fix(es):

dotnet8.0: dotnet11.0: dotnet9.0: dotnet10.0: ASP.NET Core Information Disclosure Vulnerability (CVE-2026-109476)
dotnet11.0: dotnet10.0: dotnet9.0: dotnet8.0: .NET Elevation of Privilege Vulnerability (CVE-2026-105544)
dotnet8.0: dotnet9.0: dotnet11.0: dotnet10.0: .NET Denial of Service Vulnerability (CVE-2026-109475)
dotnet9.0: dotnet11.0: dotnet10.0: dotnet8.0: dotnet: ASP.NET Core Elevation of Privilege Vulnerability (CVE-2026-114146)
dotnet11.0: dotnet8.0: dotnet9.0: dotnet10.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-114147)
dotnet11.0: dotnet8.0: dotnet9.0: dotnet10.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-114149)

Bug Fix(es) and Enhancement(s):

Update .NET 9.0 to SDK 9.0.124 and Runtime 9.0.23 (JIRA:Rocky Linux-302540)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2026:99051
CVSS 3.1: 9.0 CriticalCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C
Updated: 2026-11-13

OSVRLSA-2026:990529.0

Important: .NET 8.0 security, bug fix, and enhancement update

SDK version: 8.0.134 Runtime version: 8.0.34

Security Fix(es):

dotnet8.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-109478)
dotnet8.0: dotnet11.0: dotnet9.0: dotnet10.0: ASP.NET Core Information Disclosure Vulnerability (CVE-2026-109476)
dotnet11.0: dotnet10.0: dotnet9.0: dotnet8.0: .NET Elevation of Privilege Vulnerability (CVE-2026-105544)
dotnet8.0: dotnet9.0: dotnet11.0: dotnet10.0: .NET Denial of Service Vulnerability (CVE-2026-109475)
dotnet9.0: dotnet11.0: dotnet10.0: dotnet8.0: dotnet: ASP.NET Core Elevation of Privilege Vulnerability (CVE-2026-114146)
dotnet11.0: dotnet8.0: dotnet9.0: dotnet10.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-114147)
dotnet11.0: dotnet8.0: dotnet9.0: dotnet10.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-114149)

Bug Fix(es) and Enhancement(s):

Update .NET 8.0 to SDK 8.0.134 and Runtime 8.0.34 (JIRA:Rocky Linux-302533)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2026:99052
CVSS 3.1: 9.0 CriticalCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C
Updated: 2026-11-13

OSVRLSA-2026:990539.0

Important: .NET 10.0 security, bug fix, and enhancement update

SDK version: 10.0.115 Runtime version: 10.0.15

Security Fix(es):

dotnet8.0: dotnet11.0: dotnet9.0: dotnet10.0: ASP.NET Core Information Disclosure Vulnerability (CVE-2026-109476)
dotnet11.0: dotnet10.0: dotnet9.0: dotnet8.0: .NET Elevation of Privilege Vulnerability (CVE-2026-105544)
dotnet8.0: dotnet9.0: dotnet11.0: dotnet10.0: .NET Denial of Service Vulnerability (CVE-2026-109475)
dotnet9.0: dotnet11.0: dotnet10.0: dotnet8.0: dotnet: ASP.NET Core Elevation of Privilege Vulnerability (CVE-2026-114146)
dotnet11.0: dotnet8.0: dotnet9.0: dotnet10.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-114147)
dotnet11.0: dotnet8.0: dotnet9.0: dotnet10.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-114149)

Bug Fix(es) and Enhancement(s):

Update .NET 10.0 to SDK 10.0.115 and Runtime 10.0.15 (JIRA:Rocky Linux-302519)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2026:99053
CVSS 3.1: 9.0 CriticalCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C
Updated: 2026-11-13

OSVUBUNTU-CVE-2026-1094757.5

Managed HttpListener can recursively process an unterminated request line and exhaust the process stack.

Record: UBUNTU-CVE-2026-109475
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-12

OSVALSA-2026:99051No score

Important: .NET 9.0 security, bug fix, and enhancement update

SDK version: 9.0.124
Runtime version: 9.0.23

Security Fix(es):

dotnet8.0: dotnet11.0: dotnet9.0: dotnet10.0: ASP.NET Core Information Disclosure Vulnerability (CVE-2026-109476)
dotnet11.0: dotnet10.0: dotnet9.0: dotnet8.0: .NET Elevation of Privilege Vulnerability (CVE-2026-105544)
dotnet8.0: dotnet9.0: dotnet11.0: dotnet10.0: .NET Denial of Service Vulnerability (CVE-2026-109475)
dotnet9.0: dotnet11.0: dotnet10.0: dotnet8.0: dotnet: ASP.NET Core Elevation of Privilege Vulnerability (CVE-2026-114146)
dotnet11.0: dotnet8.0: dotnet9.0: dotnet10.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-114147)
dotnet11.0: dotnet8.0: dotnet9.0: dotnet10.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-114149)

Bug Fix(es) and Enhancement(s):

Update .NET 9.0 to SDK 9.0.124 and Runtime 9.0.23 (JIRA:RHEL-302540)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2026:99051
Updated: 2026-11-13

OSVALSA-2026:99052No score

Important: .NET 8.0 security, bug fix, and enhancement update

SDK version: 8.0.134
Runtime version: 8.0.34

Security Fix(es):

dotnet8.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-109478)
dotnet8.0: dotnet11.0: dotnet9.0: dotnet10.0: ASP.NET Core Information Disclosure Vulnerability (CVE-2026-109476)
dotnet11.0: dotnet10.0: dotnet9.0: dotnet8.0: .NET Elevation of Privilege Vulnerability (CVE-2026-105544)
dotnet8.0: dotnet9.0: dotnet11.0: dotnet10.0: .NET Denial of Service Vulnerability (CVE-2026-109475)
dotnet9.0: dotnet11.0: dotnet10.0: dotnet8.0: dotnet: ASP.NET Core Elevation of Privilege Vulnerability (CVE-2026-114146)
dotnet11.0: dotnet8.0: dotnet9.0: dotnet10.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-114147)
dotnet11.0: dotnet8.0: dotnet9.0: dotnet10.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-114149)

Bug Fix(es) and Enhancement(s):

Update .NET 8.0 to SDK 8.0.134 and Runtime 8.0.34 (JIRA:RHEL-302533)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2026:99052
Updated: 2026-11-13

OSVALSA-2026:99053No score

Important: .NET 10.0 security, bug fix, and enhancement update

SDK version: 10.0.115
Runtime version: 10.0.15

Security Fix(es):

dotnet8.0: dotnet11.0: dotnet9.0: dotnet10.0: ASP.NET Core Information Disclosure Vulnerability (CVE-2026-109476)
dotnet11.0: dotnet10.0: dotnet9.0: dotnet8.0: .NET Elevation of Privilege Vulnerability (CVE-2026-105544)
dotnet8.0: dotnet9.0: dotnet11.0: dotnet10.0: .NET Denial of Service Vulnerability (CVE-2026-109475)
dotnet9.0: dotnet11.0: dotnet10.0: dotnet8.0: dotnet: ASP.NET Core Elevation of Privilege Vulnerability (CVE-2026-114146)
dotnet11.0: dotnet8.0: dotnet9.0: dotnet10.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-114147)
dotnet11.0: dotnet8.0: dotnet9.0: dotnet10.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-114149)

Bug Fix(es) and Enhancement(s):

Update .NET 10.0 to SDK 10.0.115 and Runtime 10.0.15 (JIRA:RHEL-302519)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2026:99053
Updated: 2026-11-13

OSVUSN-9042-1No score

dotnet8, dotnet10, dotnet11 vulnerabilities

Multiple security issues were discovered in .NET and this update includes new upstream .NET versions to fix these issues.

.NET 8 has been updated to 8.0.34 in Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. .NET 10 has been updated to 10.0.15 in Ubuntu 24.04 LTS, Ubuntu 26.04 LTS and Ubuntu 26.10. .NET 11 has been updated to 11.0.0 in Ubuntu 26.10.

In addition to security fixes, the updated packages contain bug fixes, new features, and possibly incompatible changes.

Record: USN-9042-1
Updated: 2026-11-12

History

History
Recorded	Changed	Sources
Nov 13, 2026	affected, aliases, references	OSV
Nov 13, 2026	affected, aliases, references	OSV
Nov 13, 2026	affected, aliases, references	OSV
Nov 13, 2026	affected	OSV
Nov 12, 2026	affected, aliases, references	OSV
Nov 12, 2026	affected, aliases, published, references	OSV
Nov 11, 2026	published	EUVD
Nov 11, 2026	products	CVE List
Nov 11, 2026	published	EUVD, NVD
Nov 11, 2026	affected, references	OSV
Nov 10, 2026	affected, aliases, facts, references	GitHub Advisories, NVD
Nov 10, 2026	cwes, references, severity, title	CVE List
Nov 10, 2026	first indexed	EUVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 85 moreShow less

This page doesn't list everything

Left out here: 106 package rows and the rest of 2 source descriptions. The JSON record has them.