Every CVE Search/ Get API key

CVE-2026-32178

.NET Spoofing Vulnerability

7.5 HighFix available

Improper neutralization of special elements in .NET allows an unauthorized attacker to perform spoofing over a network.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
None
Availability
None

Exploit likelihood

2.28%Up 2.2 points since Apr 15, 2026
90%50%10%1%

What each source reports

CVE List Score used 7.5

.NET Spoofing Vulnerability

Improper neutralization of special elements in .NET allows an unauthorized attacker to perform spoofing over a network.

Record
CVE-2026-32178
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness
CWE-138, CWE-138
Updated
2026-11-02
EUVDEUVD-2026-22562 7.5

Improper neutralization of special elements in .NET allows an unauthorized attacker to perform spoofing over a network.

Record
EUVD-2026-22562
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
Updated
2026-11-02
GitHub AdvisoriesGHSA-vmwf-m9c5-3jvc 0.0

Microsoft Security Advisory CVE-2026-32178 – .NET Spoofing Vulnerability

Executive Summary:

Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 8.0, .NET 9.0, and .NET 10.0. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.

A vulnerability exists in System.Net.Mail where specially crafted data allows an unauthorized attacker to perform a spoofing attack over the network.

Announcement

Announcement for this issue can be found at https://github.com/dotnet/announcements/issues/12345

CVSS Details

  • Version: 3.1
  • Severity: High
  • Score: 7.5
  • Vector: 7.5: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
  • Weakness: CWE-138: Improper Neutralization of Special Elements

Affected Platforms

  • Platforms: All
  • Architectures: All

<a name="affected-packages"></a>Affected Packages

The vulnerability affects any Microsoft .NET project if it uses any of affected package versions listed below

<a name=".NET 8"></a>.NET 8

Package name | Affected version | Patched version ------------ | ---------------- | ------------------------- Microsoft.NetCore.App.Runtime.linux-arm | >= 8.0.0, <= 8.0.25 | 8.0.26 Microsoft.NetCore.App.Runtime.linux-arm64 | >= 8.0.0, <= 8.0.25 | 8.0.26 Microsoft.NetCore.App.Runtime.linux-musl-arm | >= 8.0.0, <= 8.0.25 | 8.0.26 Microsoft.NetCore.App.Runtime.linux-musl-arm64 | >= 8.0.0, <= 8.0.25 | 8.0.26 Microsoft.NetCore.App.Runtime.linux-musl-x64 | >= 8.0.0, <= 8.0.25 | 8.0.26 Microsoft.NetCore.App.Runtime.linux-x64 | >= 8.0.0, <= 8.0.25 | 8.0.26 Microsoft.NetCore.App.Runtime.osx-arm64 | >= 8.0.0, <= 8.0.25 | 8.0.26 Microsoft.NetCore.App.Runtime.osx-x64 | >= 8.0.0, <= 8.0.25 | 8.0.26 Microsoft.NetCore.App.Runtime.win-arm | >= 8.0.0, <= 8.0.25 | 8.0.26 Microsoft.NetCore.App.Runtime.win-arm64 | >= 8.0.0, <= 8.0.25 | 8.0.26 Microsoft.NetCore.App.Runtime.win-x64 | >= 8.0.0, <= 8.0.25 | 8.0.26 Microsoft.NetCore.App.Runtime.win-x86 | >= 8.0.0, <= 8.0.25 | 8.0.26

<a name=".NET 9"></a>.NET 9

Package name | Affected version | Patched version ------------ | ---------------- | ------------------------- Microsoft.NetCore.App.Runtime.linux-arm | >= 9.0.0, <= 9.0.14 | 9.0.15 Microsoft.NetCore.App.Runtime.linux-arm64 | >= 9.0.0, <= 9.0.14 | 9.0.15 Microsoft.NetCore.App.Runtime.linux-musl-arm | >= 9.0.0, <= 9.0.14 | 9.0.15 Microsoft.NetCore.App.Runtime.linux-musl-arm64 | >= 9.0.0, <= 9.0.14 | 9.0.15 Microsoft.NetCore.App.Runtime.linux-musl-x64 | >= 9.0.0, <= 9.0.14 | 9.0.15…

Record
GHSA-vmwf-m9c5-3jvc
CVSS 3.1
0.0 NoneCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
Weakness
CWE-138
Updated
2026-11-02
NVD 7.5

Improper neutralization of special elements in .NET allows an unauthorized attacker to perform spoofing over a network.

Record
CVE-2026-32178
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness
CWE-138
Updated
2026-11-02
OSVALPINE-CVE-2026-32178 7.5

Improper neutralization of special elements in .NET allows an unauthorized attacker to perform spoofing over a network.

Record
ALPINE-CVE-2026-32178
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-03
OSVBELL-CVE-2026-32178 7.5
Record
BELL-CVE-2026-32178
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
Show 36 moreShow less
OSVGHSA-vmwf-m9c5-3jvc 0.0

Microsoft Security Advisory CVE-2026-32178 – .NET Spoofing Vulnerability

Executive Summary:

Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 8.0, .NET 9.0, and .NET 10.0. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.

A vulnerability exists in System.Net.Mail where specially crafted data allows an unauthorized attacker to perform a spoofing attack over the network.

Announcement

Announcement for this issue can be found at https://github.com/dotnet/announcements/issues/12345

CVSS Details

  • Version: 3.1
  • Severity: High
  • Score: 7.5
  • Vector: 7.5: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
  • Weakness: CWE-138: Improper Neutralization of Special Elements

Affected Platforms

  • Platforms: All
  • Architectures: All

<a name="affected-packages"></a>Affected Packages

The vulnerability affects any Microsoft .NET project if it uses any of affected package versions listed below

<a name=".NET 8"></a>.NET 8

Package name | Affected version | Patched version ------------ | ---------------- | ------------------------- Microsoft.NetCore.App.Runtime.linux-arm | >= 8.0.0, <= 8.0.25 | 8.0.26 Microsoft.NetCore.App.Runtime.linux-arm64 | >= 8.0.0, <= 8.0.25 | 8.0.26 Microsoft.NetCore.App.Runtime.linux-musl-arm | >= 8.0.0, <= 8.0.25 | 8.0.26 Microsoft.NetCore.App.Runtime.linux-musl-arm64 | >= 8.0.0, <= 8.0.25 | 8.0.26 Microsoft.NetCore.App.Runtime.linux-musl-x64 | >= 8.0.0, <= 8.0.25 | 8.0.26 Microsoft.NetCore.App.Runtime.linux-x64 | >= 8.0.0, <= 8.0.25 | 8.0.26 Microsoft.NetCore.App.Runtime.osx-arm64 | >= 8.0.0, <= 8.0.25 | 8.0.26 Microsoft.NetCore.App.Runtime.osx-x64 | >= 8.0.0, <= 8.0.25 | 8.0.26 Microsoft.NetCore.App.Runtime.win-arm | >= 8.0.0, <= 8.0.25 | 8.0.26 Microsoft.NetCore.App.Runtime.win-arm64 | >= 8.0.0, <= 8.0.25 | 8.0.26 Microsoft.NetCore.App.Runtime.win-x64 | >= 8.0.0, <= 8.0.25 | 8.0.26 Microsoft.NetCore.App.Runtime.win-x86 | >= 8.0.0, <= 8.0.25 | 8.0.26

<a name=".NET 9"></a>.NET 9

Package name | Affected version | Patched version ------------ | ---------------- | ------------------------- Microsoft.NetCore.App.Runtime.linux-arm | >= 9.0.0, <= 9.0.14 | 9.0.15 Microsoft.NetCore.App.Runtime.linux-arm64 | >= 9.0.0, <= 9.0.14 | 9.0.15 Microsoft.NetCore.App.Runtime.linux-musl-arm | >= 9.0.0, <= 9.0.14 | 9.0.15 Microsoft.NetCore.App.Runtime.linux-musl-arm64 | >= 9.0.0, <= 9.0.14 | 9.0.15 Microsoft.NetCore.App.Runtime.linux-musl-x64 | >= 9.0.0, <= 9.0.14 | 9.0.15…

Record
GHSA-vmwf-m9c5-3jvc
CVSS 3.1
0.0 NoneCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
Weakness
CWE-138
Updated
2026-11-02
OSVRHSA-2026:13280 7.5

Red Hat Security Advisory: .NET 9.0 security update

Record
RHSA-2026:13280
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:13281 7.5

Red Hat Security Advisory: .NET 8.0 security update

Record
RHSA-2026:13281
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:13282 7.5

Red Hat Security Advisory: .NET 9.0 security update

Record
RHSA-2026:13282
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:13283 7.5

Red Hat Security Advisory: .NET 8.0 security update

Record
RHSA-2026:13283
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:13693 7.5

Red Hat Security Advisory: .NET 8.0 security update

Record
RHSA-2026:13693
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:8467 7.5

Red Hat Security Advisory: .NET 10.0 security update

Record
RHSA-2026:8467
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:8468 7.5

Red Hat Security Advisory: .NET 8.0 security, bug fix, and enhancement update

Record
RHSA-2026:8468
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:8469 7.5

Red Hat Security Advisory: .NET 8.0 security update

Record
RHSA-2026:8469
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:8470 7.5

Red Hat Security Advisory: .NET 8.0 security update

Record
RHSA-2026:8470
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:8471 7.5

Red Hat Security Advisory: .NET 10.0 security update

Record
RHSA-2026:8471
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:8472 7.5

Red Hat Security Advisory: .NET 9.0 security update

Record
RHSA-2026:8472
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:8473 7.5

Red Hat Security Advisory: .NET 10.0 security update

Record
RHSA-2026:8473
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:8474 7.5

Red Hat Security Advisory: .NET 9.0 security update

Record
RHSA-2026:8474
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:8475 7.5

Red Hat Security Advisory: .NET 9.0 security update

Record
RHSA-2026:8475
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:9077 7.8

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:9077
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:9080 8.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:9080
CVSS 3.1
8.5 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N
Updated
2026-11-02
OSVRHSA-2026:9205 8.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:9205
CVSS 3.1
8.5 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N
Updated
2026-11-02
OSVRLSA-2026:8467 7.5

Important: .NET 10.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 10.0.106 and .NET Runtime 10.0.6.Security Fix(es):

  • dotnet: .NET: Security Bypass and Denial of Service Vulnerability (CVE-2026-26171)

  • dotnet: .NET: Denial of Service via stack overflow (CVE-2026-32203)

  • dotnet: .NET: Denial of Service via Infinite Recursion in XmlDecryptionTransform (CVE-2026-33116)

  • dotnet: Dotnet: SMTP Command Injection and Header Injection via MailAddress parsing flaw (CVE-2026-32178)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:8467
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2026:8468 7.5

Important: .NET 8.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK SDK_VERSION and .NET Runtime RUNTIME_VERSION.Security Fix(es):

  • dotnet: .NET: Security Bypass and Denial of Service Vulnerability (CVE-2026-26171)

  • dotnet: .NET: Denial of Service via stack overflow (CVE-2026-32203)

  • dotnet: .NET: Denial of Service via Infinite Recursion in XmlDecryptionTransform (CVE-2026-33116)

  • dotnet: Dotnet: SMTP Command Injection and Header Injection via MailAddress parsing flaw (CVE-2026-32178)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:8468
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2026:8469 7.5

Important: .NET 8.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.126 and .NET Runtime 8.0.26.Security Fix(es):

  • dotnet: .NET: Security Bypass and Denial of Service Vulnerability (CVE-2026-26171)

  • dotnet: .NET: Denial of Service via stack overflow (CVE-2026-32203)

  • dotnet: .NET: Denial of Service via Infinite Recursion in XmlDecryptionTransform (CVE-2026-33116)

  • dotnet: Dotnet: SMTP Command Injection and Header Injection via MailAddress parsing flaw (CVE-2026-32178)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:8469
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2026:8470 7.5

Important: .NET 8.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.126 and .NET Runtime 8.0.26.Security Fix(es):

  • dotnet: .NET: Security Bypass and Denial of Service Vulnerability (CVE-2026-26171)

  • dotnet: .NET: Denial of Service via stack overflow (CVE-2026-32203)

  • dotnet: .NET: Denial of Service via Infinite Recursion in XmlDecryptionTransform (CVE-2026-33116)

  • dotnet: Dotnet: SMTP Command Injection and Header Injection via MailAddress parsing flaw (CVE-2026-32178)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:8470
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2026:8471 7.5

Important: .NET 10.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 10.0.106 and .NET Runtime 10.0.6.Security Fix(es):

  • dotnet: .NET: Security Bypass and Denial of Service Vulnerability (CVE-2026-26171)

  • dotnet: .NET: Denial of Service via stack overflow (CVE-2026-32203)

  • dotnet: .NET: Denial of Service via Infinite Recursion in XmlDecryptionTransform (CVE-2026-33116)

  • dotnet: Dotnet: SMTP Command Injection and Header Injection via MailAddress parsing flaw (CVE-2026-32178)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:8471
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2026:8472 7.5

Important: .NET 9.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.116 and .NET Runtime 9.0.15.Security Fix(es):

  • dotnet: .NET: Security Bypass and Denial of Service Vulnerability (CVE-2026-26171)

  • dotnet: .NET: Denial of Service via stack overflow (CVE-2026-32203)

  • dotnet: .NET: Denial of Service via Infinite Recursion in XmlDecryptionTransform (CVE-2026-33116)

  • dotnet: Dotnet: SMTP Command Injection and Header Injection via MailAddress parsing flaw (CVE-2026-32178)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:8472
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2026:8473 7.5

Important: .NET 10.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 10.0.106 and .NET Runtime 10.0.6.Security Fix(es):

  • dotnet: .NET: Security Bypass and Denial of Service Vulnerability (CVE-2026-26171)

  • dotnet: .NET: Denial of Service via stack overflow (CVE-2026-32203)

  • dotnet: .NET: Denial of Service via Infinite Recursion in XmlDecryptionTransform (CVE-2026-33116)

  • dotnet: Dotnet: SMTP Command Injection and Header Injection via MailAddress parsing flaw (CVE-2026-32178)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:8473
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2026:8474 7.5

Important: .NET 9.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.116 and .NET Runtime 9.0.15.Security Fix(es):

  • dotnet: .NET: Security Bypass and Denial of Service Vulnerability (CVE-2026-26171)

  • dotnet: .NET: Denial of Service via stack overflow (CVE-2026-32203)

  • dotnet: .NET: Denial of Service via Infinite Recursion in XmlDecryptionTransform (CVE-2026-33116)

  • dotnet: Dotnet: SMTP Command Injection and Header Injection via MailAddress parsing flaw (CVE-2026-32178)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:8474
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2026:8475 7.5

Important: .NET 9.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.116 and .NET Runtime 9.0.15.Security Fix(es):

  • dotnet: .NET: Security Bypass and Denial of Service Vulnerability (CVE-2026-26171)

  • dotnet: .NET: Denial of Service via stack overflow (CVE-2026-32203)

  • dotnet: .NET: Denial of Service via Infinite Recursion in XmlDecryptionTransform (CVE-2026-33116)

  • dotnet: Dotnet: SMTP Command Injection and Header Injection via MailAddress parsing flaw (CVE-2026-32178)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:8475
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2026-32178 7.5

Improper neutralization of special elements in .NET allows an unauthorized attacker to perform spoofing over a network.

Record
UBUNTU-CVE-2026-32178
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVALSA-2026:8468 No score

Important: .NET 8.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK SDK_VERSION and .NET Runtime RUNTIME_VERSION.Security Fix(es):

  • dotnet: .NET: Security Bypass and Denial of Service Vulnerability (CVE-2026-26171)
  • dotnet: .NET: Denial of Service via stack overflow (CVE-2026-32203)
  • dotnet: .NET: Denial of Service via Infinite Recursion in XmlDecryptionTransform (CVE-2026-33116)
  • dotnet: Dotnet: SMTP Command Injection and Header Injection via MailAddress parsing flaw (CVE-2026-32178)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:8468
Updated
2026-11-02
OSVALSA-2026:8469 No score

Important: .NET 8.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.126 and .NET Runtime 8.0.26.Security Fix(es):

  • dotnet: .NET: Security Bypass and Denial of Service Vulnerability (CVE-2026-26171)
  • dotnet: .NET: Denial of Service via stack overflow (CVE-2026-32203)
  • dotnet: .NET: Denial of Service via Infinite Recursion in XmlDecryptionTransform (CVE-2026-33116)
  • dotnet: Dotnet: SMTP Command Injection and Header Injection via MailAddress parsing flaw (CVE-2026-32178)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:8469
Updated
2026-11-02
OSVALSA-2026:8470 No score

Important: .NET 8.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.126 and .NET Runtime 8.0.26.Security Fix(es):

  • dotnet: .NET: Security Bypass and Denial of Service Vulnerability (CVE-2026-26171)
  • dotnet: .NET: Denial of Service via stack overflow (CVE-2026-32203)
  • dotnet: .NET: Denial of Service via Infinite Recursion in XmlDecryptionTransform (CVE-2026-33116)
  • dotnet: Dotnet: SMTP Command Injection and Header Injection via MailAddress parsing flaw (CVE-2026-32178)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:8470
Updated
2026-11-02
OSVALSA-2026:8472 No score

Important: .NET 9.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.116 and .NET Runtime 9.0.15.Security Fix(es):

  • dotnet: .NET: Security Bypass and Denial of Service Vulnerability (CVE-2026-26171)
  • dotnet: .NET: Denial of Service via stack overflow (CVE-2026-32203)
  • dotnet: .NET: Denial of Service via Infinite Recursion in XmlDecryptionTransform (CVE-2026-33116)
  • dotnet: Dotnet: SMTP Command Injection and Header Injection via MailAddress parsing flaw (CVE-2026-32178)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:8472
Updated
2026-11-02
OSVALSA-2026:8473 No score

Important: .NET 10.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 10.0.106 and .NET Runtime 10.0.6.Security Fix(es):

  • dotnet: .NET: Security Bypass and Denial of Service Vulnerability (CVE-2026-26171)
  • dotnet: .NET: Denial of Service via stack overflow (CVE-2026-32203)
  • dotnet: .NET: Denial of Service via Infinite Recursion in XmlDecryptionTransform (CVE-2026-33116)
  • dotnet: Dotnet: SMTP Command Injection and Header Injection via MailAddress parsing flaw (CVE-2026-32178)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:8473
Updated
2026-11-02
OSVALSA-2026:8475 No score

Important: .NET 9.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.116 and .NET Runtime 9.0.15.Security Fix(es):

  • dotnet: .NET: Security Bypass and Denial of Service Vulnerability (CVE-2026-26171)
  • dotnet: .NET: Denial of Service via stack overflow (CVE-2026-32203)
  • dotnet: .NET: Denial of Service via Infinite Recursion in XmlDecryptionTransform (CVE-2026-33116)
  • dotnet: Dotnet: SMTP Command Injection and Header Injection via MailAddress parsing flaw (CVE-2026-32178)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:8475
Updated
2026-11-02
OSVBIT-dotnet-2026-32178 No score

.NET Spoofing Vulnerability

Improper neutralization of special elements in .NET allows an unauthorized attacker to perform spoofing over a network.

Record
BIT-dotnet-2026-32178
Updated
2026-11-02
OSVBIT-dotnet-sdk-2026-32178 No score

.NET Spoofing Vulnerability

Improper neutralization of special elements in .NET allows an unauthorized attacker to perform spoofing over a network.

Record
BIT-dotnet-sdk-2026-32178
Updated
2026-11-02

Affected products

Show 2 moreShow less

Affected packages

Affected packages
PackageAffectedFixed
Microsoft.NetCore.App.Runtime.linux-arm
NuGet
 10.0.0 to 10.0.5
10.0.6
Microsoft.NetCore.App.Runtime.linux-musl-arm
NuGet
 10.0.0 to 10.0.5
10.0.6
Microsoft.NetCore.App.Runtime.linux-arm64
NuGet
 10.0.0 to 10.0.5
10.0.6
Microsoft.NetCore.App.Runtime.linux-musl-x64
NuGet
 10.0.0 to 10.0.5
10.0.6
Microsoft.NetCore.App.Runtime.linux-musl-arm64
NuGet
 10.0.0 to 10.0.5
10.0.6
Microsoft.NetCore.App.Runtime.linux-x64
NuGet
 10.0.0 to 10.0.5
10.0.6
Microsoft.NetCore.App.Runtime.osx-arm64
NuGet
 10.0.0 to 10.0.5
10.0.6
Microsoft.NetCore.App.Runtime.osx-x64
NuGet
 10.0.0 to 10.0.5
10.0.6
Microsoft.NetCore.App.Runtime.win-arm
NuGet
 10.0.0 to 10.0.5
10.0.6
Microsoft.NetCore.App.Runtime.win-arm64
NuGet
 10.0.0 to 10.0.5
10.0.6
Show 290 moreShow less
Affected packages
PackageAffectedFixed
Microsoft.NetCore.App.Runtime.win-x64
NuGet
 10.0.0 to 10.0.5
10.0.6
Microsoft.NetCore.App.Runtime.win-x86
NuGet
 10.0.0 to 10.0.5
10.0.6
Microsoft.NetCore.App.Runtime.linux-arm
NuGet
 9.0.0 to 9.0.14
9.0.15
Microsoft.NetCore.App.Runtime.linux-arm64
NuGet
 9.0.0 to 9.0.14
9.0.15
Microsoft.NetCore.App.Runtime.linux-musl-arm
NuGet
 9.0.0 to 9.0.14
9.0.15
Microsoft.NetCore.App.Runtime.linux-musl-arm64
NuGet
 9.0.0 to 9.0.14
9.0.15
Microsoft.NetCore.App.Runtime.linux-musl-x64
NuGet
 9.0.0 to 9.0.14
9.0.15
Microsoft.NetCore.App.Runtime.linux-x64
NuGet
 9.0.0 to 9.0.14
9.0.15
Microsoft.NetCore.App.Runtime.osx-arm64
NuGet
 9.0.0 to 9.0.14
9.0.15
Microsoft.NetCore.App.Runtime.osx-x64
NuGet
 9.0.0 to 9.0.14
9.0.15
Microsoft.NetCore.App.Runtime.win-arm
NuGet
 9.0.0 to 9.0.14
9.0.15
Microsoft.NetCore.App.Runtime.win-arm64
NuGet
 9.0.0 to 9.0.14
9.0.15
Microsoft.NetCore.App.Runtime.win-x64
NuGet
 9.0.0 to 9.0.14
9.0.15
Microsoft.NetCore.App.Runtime.win-x86
NuGet
 9.0.0 to 9.0.14
9.0.15
Microsoft.NetCore.App.Runtime.linux-arm
NuGet
 8.0.0 to 8.0.25
8.0.26
Microsoft.NetCore.App.Runtime.linux-arm64
NuGet
 8.0.0 to 8.0.25
8.0.26
Microsoft.NetCore.App.Runtime.linux-musl-arm
NuGet
 8.0.0 to 8.0.25
8.0.26
Microsoft.NetCore.App.Runtime.linux-musl-arm64
NuGet
 8.0.0 to 8.0.25
8.0.26
Microsoft.NetCore.App.Runtime.linux-musl-x64
NuGet
 8.0.0 to 8.0.25
8.0.26
Microsoft.NetCore.App.Runtime.linux-x64
NuGet
 8.0.0 to 8.0.25
8.0.26
Microsoft.NetCore.App.Runtime.osx-arm64
NuGet
 8.0.0 to 8.0.25
8.0.26
Microsoft.NetCore.App.Runtime.osx-x64
NuGet
 8.0.0 to 8.0.25
8.0.26
Microsoft.NetCore.App.Runtime.win-arm
NuGet
 8.0.0 to 8.0.25
8.0.26
Microsoft.NetCore.App.Runtime.win-arm64
NuGet
 8.0.0 to 8.0.25
8.0.26
Microsoft.NetCore.App.Runtime.win-x64
NuGet
 8.0.0 to 8.0.25
8.0.26
Microsoft.NetCore.App.Runtime.win-x86
NuGet
 8.0.0 to 8.0.25
8.0.26
dotnet10-runtime
Alpine:v3.23
 before 10.0.6-r0
10.0.6-r0
dotnet10-runtime
Alpine:v3.24
 before 10.0.6-r0
10.0.6-r0
dotnet8-runtime
Alpine:v3.20
 before 8.0.26-r0
8.0.26-r0
dotnet8-runtime
Alpine:v3.21
 before 8.0.26-r0
8.0.26-r0
dotnet8-runtime
Alpine:v3.22
 before 8.0.26-r0
8.0.26-r0
dotnet8-runtime
Alpine:v3.23
 before 8.0.26-r0
8.0.26-r0
dotnet8-runtime
Alpine:v3.24
 before 8.0.26-r0
8.0.26-r0
dotnet9-runtime
Alpine:v3.21
 before 9.0.15-r0
9.0.15-r0
dotnet9-runtime
Alpine:v3.22
 before 9.0.15-r0
9.0.15-r0
dotnet9-runtime
Alpine:v3.23
 before 9.0.15-r0
9.0.15-r0
dotnet9-runtime
Alpine:v3.24
 before 9.0.15-r0
9.0.15-r0
aspnetcore-runtime-8.0
AlmaLinux:8
From an advisory covering 4 CVEs
 before 8.0.26-1.el8_10
8.0.26-1.el8_10
aspnetcore-runtime-dbg-8.0
AlmaLinux:8
From an advisory covering 4 CVEs
 before 8.0.26-1.el8_10
8.0.26-1.el8_10
aspnetcore-targeting-pack-8.0
AlmaLinux:8
From an advisory covering 4 CVEs
 before 8.0.26-1.el8_10
8.0.26-1.el8_10
dotnet-apphost-pack-8.0
AlmaLinux:8
From an advisory covering 4 CVEs
 before 8.0.26-1.el8_10
8.0.26-1.el8_10
dotnet-hostfxr-8.0
AlmaLinux:8
From an advisory covering 4 CVEs
 before 8.0.26-1.el8_10
8.0.26-1.el8_10
dotnet-runtime-8.0
AlmaLinux:8
From an advisory covering 4 CVEs
 before 8.0.26-1.el8_10
8.0.26-1.el8_10
dotnet-runtime-dbg-8.0
AlmaLinux:8
From an advisory covering 4 CVEs
 before 8.0.26-1.el8_10
8.0.26-1.el8_10
dotnet-sdk-8.0
AlmaLinux:8
From an advisory covering 4 CVEs
 before 8.0.126-1.el8_10
8.0.126-1.el8_10
dotnet-sdk-8.0-source-built-artifacts
AlmaLinux:8
From an advisory covering 4 CVEs
 before 8.0.126-1.el8_10
8.0.126-1.el8_10
dotnet-sdk-dbg-8.0
AlmaLinux:8
From an advisory covering 4 CVEs
 before 8.0.126-1.el8_10
8.0.126-1.el8_10
dotnet-targeting-pack-8.0
AlmaLinux:8
From an advisory covering 4 CVEs
 before 8.0.26-1.el8_10
8.0.26-1.el8_10
dotnet-templates-8.0
AlmaLinux:8
From an advisory covering 4 CVEs
 before 8.0.126-1.el8_10
8.0.126-1.el8_10
aspnetcore-runtime-8.0
AlmaLinux:9
From an advisory covering 4 CVEs
 before 8.0.26-1.el9_7
8.0.26-1.el9_7
aspnetcore-runtime-dbg-8.0
AlmaLinux:9
From an advisory covering 4 CVEs
 before 8.0.26-1.el9_7
8.0.26-1.el9_7
aspnetcore-targeting-pack-8.0
AlmaLinux:9
From an advisory covering 4 CVEs
 before 8.0.26-1.el9_7
8.0.26-1.el9_7
dotnet-apphost-pack-8.0
AlmaLinux:9
From an advisory covering 4 CVEs
 before 8.0.26-1.el9_7
8.0.26-1.el9_7
dotnet-hostfxr-8.0
AlmaLinux:9
From an advisory covering 4 CVEs
 before 8.0.26-1.el9_7
8.0.26-1.el9_7
dotnet-runtime-8.0
AlmaLinux:9
From an advisory covering 4 CVEs
 before 8.0.26-1.el9_7
8.0.26-1.el9_7
dotnet-runtime-dbg-8.0
AlmaLinux:9
From an advisory covering 4 CVEs
 before 8.0.26-1.el9_7
8.0.26-1.el9_7
dotnet-sdk-8.0
AlmaLinux:9
From an advisory covering 4 CVEs
 before 8.0.126-1.el9_7
8.0.126-1.el9_7
dotnet-sdk-8.0-source-built-artifacts
AlmaLinux:9
From an advisory covering 4 CVEs
 before 8.0.126-1.el9_7
8.0.126-1.el9_7
dotnet-sdk-dbg-8.0
AlmaLinux:9
From an advisory covering 4 CVEs
 before 8.0.126-1.el9_7
8.0.126-1.el9_7
dotnet-targeting-pack-8.0
AlmaLinux:9
From an advisory covering 4 CVEs
 before 8.0.26-1.el9_7
8.0.26-1.el9_7
dotnet-templates-8.0
AlmaLinux:9
From an advisory covering 4 CVEs
 before 8.0.126-1.el9_7
8.0.126-1.el9_7
aspnetcore-runtime-8.0
AlmaLinux:10
From an advisory covering 4 CVEs
 before 8.0.26-1.el10_1
8.0.26-1.el10_1
aspnetcore-runtime-dbg-8.0
AlmaLinux:10
From an advisory covering 4 CVEs
 before 8.0.26-1.el10_1
8.0.26-1.el10_1
aspnetcore-targeting-pack-8.0
AlmaLinux:10
From an advisory covering 4 CVEs
 before 8.0.26-1.el10_1
8.0.26-1.el10_1
dotnet-apphost-pack-8.0
AlmaLinux:10
From an advisory covering 4 CVEs
 before 8.0.26-1.el10_1
8.0.26-1.el10_1
dotnet-hostfxr-8.0
AlmaLinux:10
From an advisory covering 4 CVEs
 before 8.0.26-1.el10_1
8.0.26-1.el10_1
dotnet-runtime-8.0
AlmaLinux:10
From an advisory covering 4 CVEs
 before 8.0.26-1.el10_1
8.0.26-1.el10_1
dotnet-runtime-dbg-8.0
AlmaLinux:10
From an advisory covering 4 CVEs
 before 8.0.26-1.el10_1
8.0.26-1.el10_1
dotnet-sdk-8.0
AlmaLinux:10
From an advisory covering 4 CVEs
 before 8.0.126-1.el10_1
8.0.126-1.el10_1
dotnet-sdk-8.0-source-built-artifacts
AlmaLinux:10
From an advisory covering 4 CVEs
 before 8.0.126-1.el10_1
8.0.126-1.el10_1
dotnet-sdk-dbg-8.0
AlmaLinux:10
From an advisory covering 4 CVEs
 before 8.0.126-1.el10_1
8.0.126-1.el10_1
dotnet-targeting-pack-8.0
AlmaLinux:10
From an advisory covering 4 CVEs
 before 8.0.26-1.el10_1
8.0.26-1.el10_1
dotnet-templates-8.0
AlmaLinux:10
From an advisory covering 4 CVEs
 before 8.0.126-1.el10_1
8.0.126-1.el10_1
aspnetcore-runtime-9.0
AlmaLinux:10
From an advisory covering 4 CVEs
 before 9.0.15-1.el10_1
9.0.15-1.el10_1
aspnetcore-runtime-dbg-9.0
AlmaLinux:10
From an advisory covering 4 CVEs
 before 9.0.15-1.el10_1
9.0.15-1.el10_1
aspnetcore-targeting-pack-9.0
AlmaLinux:10
From an advisory covering 4 CVEs
 before 9.0.15-1.el10_1
9.0.15-1.el10_1
dotnet-apphost-pack-9.0
AlmaLinux:10
From an advisory covering 4 CVEs
 before 9.0.15-1.el10_1
9.0.15-1.el10_1
dotnet-hostfxr-9.0
AlmaLinux:10
From an advisory covering 4 CVEs
 before 9.0.15-1.el10_1
9.0.15-1.el10_1
dotnet-runtime-9.0
AlmaLinux:10
From an advisory covering 4 CVEs
 before 9.0.15-1.el10_1
9.0.15-1.el10_1
dotnet-runtime-dbg-9.0
AlmaLinux:10
From an advisory covering 4 CVEs
 before 9.0.15-1.el10_1
9.0.15-1.el10_1
dotnet-sdk-9.0
AlmaLinux:10
From an advisory covering 4 CVEs
 before 9.0.116-1.el10_1
9.0.116-1.el10_1
dotnet-sdk-9.0-source-built-artifacts
AlmaLinux:10
From an advisory covering 4 CVEs
 before 9.0.116-1.el10_1
9.0.116-1.el10_1
dotnet-sdk-aot-9.0
AlmaLinux:10
From an advisory covering 4 CVEs
 before 9.0.116-1.el10_1
9.0.116-1.el10_1
dotnet-sdk-dbg-9.0
AlmaLinux:10
From an advisory covering 4 CVEs
 before 9.0.116-1.el10_1
9.0.116-1.el10_1
dotnet-targeting-pack-9.0
AlmaLinux:10
From an advisory covering 4 CVEs
 before 9.0.15-1.el10_1
9.0.15-1.el10_1
dotnet-templates-9.0
AlmaLinux:10
From an advisory covering 4 CVEs
 before 9.0.116-1.el10_1
9.0.116-1.el10_1
netstandard-targeting-pack-2.1
AlmaLinux:10
From an advisory covering 4 CVEs
 before 9.0.116-1.el10_1
9.0.116-1.el10_1
aspnetcore-runtime-10.0
AlmaLinux:8
From an advisory covering 4 CVEs
 before 10.0.6-1.el8_10
10.0.6-1.el8_10
aspnetcore-runtime-dbg-10.0
AlmaLinux:8
From an advisory covering 4 CVEs
 before 10.0.6-1.el8_10
10.0.6-1.el8_10
aspnetcore-targeting-pack-10.0
AlmaLinux:8
From an advisory covering 4 CVEs
 before 10.0.6-1.el8_10
10.0.6-1.el8_10
dotnet
AlmaLinux:8
From an advisory covering 4 CVEs
 before 10.0.106-1.el8_10
10.0.106-1.el8_10
dotnet-apphost-pack-10.0
AlmaLinux:8
From an advisory covering 4 CVEs
 before 10.0.6-1.el8_10
10.0.6-1.el8_10
dotnet-host
AlmaLinux:8
From an advisory covering 4 CVEs
 before 10.0.6-1.el8_10
10.0.6-1.el8_10
dotnet-hostfxr-10.0
AlmaLinux:8
From an advisory covering 4 CVEs
 before 10.0.6-1.el8_10
10.0.6-1.el8_10
dotnet-runtime-10.0
AlmaLinux:8
From an advisory covering 4 CVEs
 before 10.0.6-1.el8_10
10.0.6-1.el8_10
dotnet-runtime-dbg-10.0
AlmaLinux:8
From an advisory covering 4 CVEs
 before 10.0.6-1.el8_10
10.0.6-1.el8_10
dotnet-sdk-10.0
AlmaLinux:8
From an advisory covering 4 CVEs
 before 10.0.106-1.el8_10
10.0.106-1.el8_10
dotnet-sdk-10.0-source-built-artifacts
AlmaLinux:8
From an advisory covering 4 CVEs
 before 10.0.106-1.el8_10
10.0.106-1.el8_10
dotnet-sdk-aot-10.0
AlmaLinux:8
From an advisory covering 4 CVEs
 before 10.0.106-1.el8_10
10.0.106-1.el8_10
dotnet-sdk-dbg-10.0
AlmaLinux:8
From an advisory covering 4 CVEs
 before 10.0.106-1.el8_10
10.0.106-1.el8_10
dotnet-targeting-pack-10.0
AlmaLinux:8
From an advisory covering 4 CVEs
 before 10.0.6-1.el8_10
10.0.6-1.el8_10
dotnet-templates-10.0
AlmaLinux:8
From an advisory covering 4 CVEs
 before 10.0.106-1.el8_10
10.0.106-1.el8_10
aspnetcore-runtime-9.0
AlmaLinux:8
From an advisory covering 4 CVEs
 before 9.0.15-1.el8_10
9.0.15-1.el8_10
aspnetcore-runtime-dbg-9.0
AlmaLinux:8
From an advisory covering 4 CVEs
 before 9.0.15-1.el8_10
9.0.15-1.el8_10
aspnetcore-targeting-pack-9.0
AlmaLinux:8
From an advisory covering 4 CVEs
 before 9.0.15-1.el8_10
9.0.15-1.el8_10
dotnet-apphost-pack-9.0
AlmaLinux:8
From an advisory covering 4 CVEs
 before 9.0.15-1.el8_10
9.0.15-1.el8_10
dotnet-hostfxr-9.0
AlmaLinux:8
From an advisory covering 4 CVEs
 before 9.0.15-1.el8_10
9.0.15-1.el8_10
dotnet-runtime-9.0
AlmaLinux:8
From an advisory covering 4 CVEs
 before 9.0.15-1.el8_10
9.0.15-1.el8_10
dotnet-runtime-dbg-9.0
AlmaLinux:8
From an advisory covering 4 CVEs
 before 9.0.15-1.el8_10
9.0.15-1.el8_10
dotnet-sdk-9.0
AlmaLinux:8
From an advisory covering 4 CVEs
 before 9.0.116-1.el8_10
9.0.116-1.el8_10
dotnet-sdk-9.0-source-built-artifacts
AlmaLinux:8
From an advisory covering 4 CVEs
 before 9.0.116-1.el8_10
9.0.116-1.el8_10
dotnet-sdk-aot-9.0
AlmaLinux:8
From an advisory covering 4 CVEs
 before 9.0.116-1.el8_10
9.0.116-1.el8_10
dotnet-sdk-dbg-9.0
AlmaLinux:8
From an advisory covering 4 CVEs
 before 9.0.116-1.el8_10
9.0.116-1.el8_10
dotnet-targeting-pack-9.0
AlmaLinux:8
From an advisory covering 4 CVEs
 before 9.0.15-1.el8_10
9.0.15-1.el8_10
dotnet-templates-9.0
AlmaLinux:8
From an advisory covering 4 CVEs
 before 9.0.116-1.el8_10
9.0.116-1.el8_10
netstandard-targeting-pack-2.1
AlmaLinux:8
From an advisory covering 4 CVEs
 before 9.0.116-1.el8_10
9.0.116-1.el8_10
dotnet8-runtime
Alpaquita:25
 8.0.17-r0 up to 8.0.26-r0
8.0.26-r0
dotnet8-runtime
Alpaquita:stream
 8.0.11-r1 up to 8.0.26-r0
8.0.26-r0
dotnet
Bitnami
 8.0.0 up to 8.0.26, 9.0.0 up to 9.0.15, 10.0.0 up to 10.0.6
8.0.269.0.1510.0.6
dotnet-sdk
Bitnami
 8.0.0 up to 8.0.26, 9.0.0 up to 9.0.15, 10.0.0 up to 10.0.6
8.0.269.0.1510.0.6
Microsoft.NetCore.App.Runtime.linux-arm
NuGet
 10.0.0 up to 10.0.6, plus listed versions
10.0.110.0.210.0.310.0.410.0.5
10.0.6
Microsoft.NetCore.App.Runtime.linux-musl-arm
NuGet
 10.0.0 up to 10.0.6, plus listed versions
10.0.110.0.210.0.310.0.410.0.5
10.0.6
Microsoft.NetCore.App.Runtime.linux-arm64
NuGet
 10.0.0 up to 10.0.6, plus listed versions
10.0.110.0.210.0.310.0.410.0.5
10.0.6
Microsoft.NetCore.App.Runtime.linux-musl-x64
NuGet
 10.0.0 up to 10.0.6, plus listed versions
10.0.110.0.210.0.310.0.410.0.5
10.0.6
Microsoft.NetCore.App.Runtime.linux-musl-arm64
NuGet
 10.0.0 up to 10.0.6, plus listed versions
10.0.110.0.210.0.310.0.410.0.5
10.0.6
Microsoft.NetCore.App.Runtime.linux-x64
NuGet
 10.0.0 up to 10.0.6, plus listed versions
10.0.110.0.210.0.310.0.410.0.5
10.0.6
Microsoft.NetCore.App.Runtime.osx-arm64
NuGet
 10.0.0 up to 10.0.6, plus listed versions
10.0.110.0.210.0.310.0.410.0.5
10.0.6
Microsoft.NetCore.App.Runtime.osx-x64
NuGet
 10.0.0 up to 10.0.6, plus listed versions
10.0.110.0.210.0.310.0.410.0.5
10.0.6
Microsoft.NetCore.App.Runtime.win-arm
NuGet
 10.0.0 up to 10.0.6
10.0.6
Microsoft.NetCore.App.Runtime.win-arm64
NuGet
 10.0.0 up to 10.0.6, plus listed versions
10.0.110.0.210.0.310.0.410.0.5
10.0.6
Microsoft.NetCore.App.Runtime.win-x64
NuGet
 10.0.0 up to 10.0.6, plus listed versions
10.0.110.0.210.0.310.0.410.0.5
10.0.6
Microsoft.NetCore.App.Runtime.win-x86
NuGet
 10.0.0 up to 10.0.6, plus listed versions
10.0.110.0.210.0.310.0.410.0.5
10.0.6
Microsoft.NetCore.App.Runtime.linux-arm
NuGet
 9.0.0 up to 9.0.15, plus listed versions
9.0.19.0.109.0.119.0.129.0.13
Show 9 moreShow less
9.0.149.0.29.0.39.0.49.0.59.0.69.0.79.0.89.0.9
9.0.15
Microsoft.NetCore.App.Runtime.linux-arm64
NuGet
 9.0.0 up to 9.0.15, plus listed versions
9.0.19.0.109.0.119.0.129.0.13
Show 9 moreShow less
9.0.149.0.29.0.39.0.49.0.59.0.69.0.79.0.89.0.9
9.0.15
Microsoft.NetCore.App.Runtime.linux-musl-arm
NuGet
 9.0.0 up to 9.0.15, plus listed versions
9.0.19.0.109.0.119.0.129.0.13
Show 9 moreShow less
9.0.149.0.29.0.39.0.49.0.59.0.69.0.79.0.89.0.9
9.0.15
Microsoft.NetCore.App.Runtime.linux-musl-arm64
NuGet
 9.0.0 up to 9.0.15, plus listed versions
9.0.19.0.109.0.119.0.129.0.13
Show 9 moreShow less
9.0.149.0.29.0.39.0.49.0.59.0.69.0.79.0.89.0.9
9.0.15
Microsoft.NetCore.App.Runtime.linux-musl-x64
NuGet
 9.0.0 up to 9.0.15, plus listed versions
9.0.19.0.109.0.119.0.129.0.13
Show 9 moreShow less
9.0.149.0.29.0.39.0.49.0.59.0.69.0.79.0.89.0.9
9.0.15
Microsoft.NetCore.App.Runtime.linux-x64
NuGet
 9.0.0 up to 9.0.15, plus listed versions
9.0.19.0.109.0.119.0.129.0.13
Show 9 moreShow less
9.0.149.0.29.0.39.0.49.0.59.0.69.0.79.0.89.0.9
9.0.15
Microsoft.NetCore.App.Runtime.osx-arm64
NuGet
 9.0.0 up to 9.0.15, plus listed versions
9.0.19.0.109.0.119.0.129.0.13
Show 9 moreShow less
9.0.149.0.29.0.39.0.49.0.59.0.69.0.79.0.89.0.9
9.0.15
Microsoft.NetCore.App.Runtime.osx-x64
NuGet
 9.0.0 up to 9.0.15, plus listed versions
9.0.19.0.109.0.119.0.129.0.13
Show 9 moreShow less
9.0.149.0.29.0.39.0.49.0.59.0.69.0.79.0.89.0.9
9.0.15
Microsoft.NetCore.App.Runtime.win-arm
NuGet
 9.0.0 up to 9.0.15
9.0.15
Microsoft.NetCore.App.Runtime.win-arm64
NuGet
 9.0.0 up to 9.0.15, plus listed versions
9.0.19.0.109.0.119.0.129.0.13
Show 9 moreShow less
9.0.149.0.29.0.39.0.49.0.59.0.69.0.79.0.89.0.9
9.0.15
Microsoft.NetCore.App.Runtime.win-x64
NuGet
 9.0.0 up to 9.0.15, plus listed versions
9.0.19.0.109.0.119.0.129.0.13
Show 9 moreShow less
9.0.149.0.29.0.39.0.49.0.59.0.69.0.79.0.89.0.9
9.0.15
Microsoft.NetCore.App.Runtime.win-x86
NuGet
 9.0.0 up to 9.0.15, plus listed versions
9.0.19.0.109.0.119.0.129.0.13
Show 9 moreShow less
9.0.149.0.29.0.39.0.49.0.59.0.69.0.79.0.89.0.9
9.0.15
Microsoft.NetCore.App.Runtime.linux-arm
NuGet
 8.0.0 up to 8.0.26, plus listed versions
8.0.18.0.108.0.118.0.128.0.13
Show 19 moreShow less
8.0.148.0.158.0.168.0.178.0.188.0.198.0.28.0.208.0.218.0.228.0.238.0.248.0.258.0.38.0.48.0.58.0.68.0.78.0.8
8.0.26
Microsoft.NetCore.App.Runtime.linux-arm64
NuGet
 8.0.0 up to 8.0.26, plus listed versions
8.0.18.0.108.0.118.0.128.0.13
Show 19 moreShow less
8.0.148.0.158.0.168.0.178.0.188.0.198.0.28.0.208.0.218.0.228.0.238.0.248.0.258.0.38.0.48.0.58.0.68.0.78.0.8
8.0.26
Microsoft.NetCore.App.Runtime.linux-musl-arm
NuGet
 8.0.0 up to 8.0.26, plus listed versions
8.0.18.0.108.0.118.0.128.0.13
Show 19 moreShow less
8.0.148.0.158.0.168.0.178.0.188.0.198.0.28.0.208.0.218.0.228.0.238.0.248.0.258.0.38.0.48.0.58.0.68.0.78.0.8
8.0.26
Microsoft.NetCore.App.Runtime.linux-musl-arm64
NuGet
 8.0.0 up to 8.0.26, plus listed versions
8.0.18.0.108.0.118.0.128.0.13
Show 19 moreShow less
8.0.148.0.158.0.168.0.178.0.188.0.198.0.28.0.208.0.218.0.228.0.238.0.248.0.258.0.38.0.48.0.58.0.68.0.78.0.8
8.0.26
Microsoft.NetCore.App.Runtime.linux-musl-x64
NuGet
 8.0.0 up to 8.0.26, plus listed versions
8.0.18.0.108.0.118.0.128.0.13
Show 19 moreShow less
8.0.148.0.158.0.168.0.178.0.188.0.198.0.28.0.208.0.218.0.228.0.238.0.248.0.258.0.38.0.48.0.58.0.68.0.78.0.8
8.0.26
Microsoft.NetCore.App.Runtime.linux-x64
NuGet
 8.0.0 up to 8.0.26, plus listed versions
8.0.18.0.108.0.118.0.128.0.13
Show 19 moreShow less
8.0.148.0.158.0.168.0.178.0.188.0.198.0.28.0.208.0.218.0.228.0.238.0.248.0.258.0.38.0.48.0.58.0.68.0.78.0.8
8.0.26
Microsoft.NetCore.App.Runtime.osx-arm64
NuGet
 8.0.0 up to 8.0.26, plus listed versions
8.0.18.0.108.0.118.0.128.0.13
Show 19 moreShow less
8.0.148.0.158.0.168.0.178.0.188.0.198.0.28.0.208.0.218.0.228.0.238.0.248.0.258.0.38.0.48.0.58.0.68.0.78.0.8
8.0.26
Microsoft.NetCore.App.Runtime.osx-x64
NuGet
 8.0.0 up to 8.0.26, plus listed versions
8.0.18.0.108.0.118.0.128.0.13
Show 19 moreShow less
8.0.148.0.158.0.168.0.178.0.188.0.198.0.28.0.208.0.218.0.228.0.238.0.248.0.258.0.38.0.48.0.58.0.68.0.78.0.8
8.0.26
Microsoft.NetCore.App.Runtime.win-arm
NuGet
 8.0.0 up to 8.0.26
8.0.26
Microsoft.NetCore.App.Runtime.win-arm64
NuGet
 8.0.0 up to 8.0.26, plus listed versions
8.0.18.0.108.0.118.0.128.0.13
Show 19 moreShow less
8.0.148.0.158.0.168.0.178.0.188.0.198.0.28.0.208.0.218.0.228.0.238.0.248.0.258.0.38.0.48.0.58.0.68.0.78.0.8
8.0.26
Microsoft.NetCore.App.Runtime.win-x64
NuGet
 8.0.0 up to 8.0.26, plus listed versions
8.0.18.0.108.0.118.0.128.0.13
Show 19 moreShow less
8.0.148.0.158.0.168.0.178.0.188.0.198.0.28.0.208.0.218.0.228.0.238.0.248.0.258.0.38.0.48.0.58.0.68.0.78.0.8
8.0.26
Microsoft.NetCore.App.Runtime.win-x86
NuGet
 8.0.0 up to 8.0.26, plus listed versions
8.0.18.0.108.0.118.0.128.0.13
Show 19 moreShow less
8.0.148.0.158.0.168.0.178.0.188.0.198.0.28.0.208.0.218.0.228.0.238.0.248.0.258.0.38.0.48.0.58.0.68.0.78.0.8
8.0.26
aspnetcore-runtime-9.0
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 4 CVEs
 before 0:9.0.15-1.el10_0
0:9.0.15-1.el10_0
aspnetcore-runtime-dbg-9.0
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 4 CVEs
 before 0:9.0.15-1.el10_0
0:9.0.15-1.el10_0
aspnetcore-targeting-pack-9.0
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 4 CVEs
 before 0:9.0.15-1.el10_0
0:9.0.15-1.el10_0
dotnet-apphost-pack-9.0
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 4 CVEs
 before 0:9.0.15-1.el10_0
0:9.0.15-1.el10_0
dotnet-apphost-pack-9.0-debuginfo
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 4 CVEs
 before 0:9.0.15-1.el10_0
0:9.0.15-1.el10_0
dotnet-host
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 4 CVEs
 before 0:9.0.15-1.el10_0
0:9.0.15-1.el10_0
dotnet-host-debuginfo
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 4 CVEs
 before 0:9.0.15-1.el10_0
0:9.0.15-1.el10_0
dotnet-hostfxr-9.0
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 4 CVEs
 before 0:9.0.15-1.el10_0
0:9.0.15-1.el10_0
dotnet-hostfxr-9.0-debuginfo
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 4 CVEs
 before 0:9.0.15-1.el10_0
0:9.0.15-1.el10_0
dotnet-runtime-9.0
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 4 CVEs
 before 0:9.0.15-1.el10_0
0:9.0.15-1.el10_0
dotnet-runtime-9.0-debuginfo
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 4 CVEs
 before 0:9.0.15-1.el10_0
0:9.0.15-1.el10_0
dotnet-runtime-dbg-9.0
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 4 CVEs
 before 0:9.0.15-1.el10_0
0:9.0.15-1.el10_0
dotnet-sdk-9.0
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 4 CVEs
 before 0:9.0.116-1.el10_0
0:9.0.116-1.el10_0
dotnet-sdk-9.0-debuginfo
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 4 CVEs
 before 0:9.0.116-1.el10_0
0:9.0.116-1.el10_0
dotnet-sdk-aot-9.0
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 4 CVEs
 before 0:9.0.116-1.el10_0
0:9.0.116-1.el10_0
dotnet-sdk-aot-9.0-debuginfo
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 4 CVEs
 before 0:9.0.116-1.el10_0
0:9.0.116-1.el10_0
dotnet-sdk-dbg-9.0
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 4 CVEs
 before 0:9.0.116-1.el10_0
0:9.0.116-1.el10_0
dotnet-targeting-pack-9.0
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 4 CVEs
 before 0:9.0.15-1.el10_0
0:9.0.15-1.el10_0
dotnet-templates-9.0
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 4 CVEs
 before 0:9.0.116-1.el10_0
0:9.0.116-1.el10_0
dotnet9.0
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 4 CVEs
 before 0:9.0.116-1.el10_0
0:9.0.116-1.el10_0
dotnet9.0-debugsource
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 4 CVEs
 before 0:9.0.116-1.el10_0
0:9.0.116-1.el10_0
netstandard-targeting-pack-2.1
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 4 CVEs
 before 0:9.0.116-1.el10_0
0:9.0.116-1.el10_0
dotnet-sdk-9.0-source-built-artifacts
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 4 CVEs
 before 0:9.0.116-1.el10_0
0:9.0.116-1.el10_0
aspnetcore-runtime-8.0
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 4 CVEs
 before 0:8.0.26-1.el10_0
0:8.0.26-1.el10_0
aspnetcore-runtime-dbg-8.0
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 4 CVEs
 before 0:8.0.26-1.el10_0
0:8.0.26-1.el10_0
aspnetcore-targeting-pack-8.0
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 4 CVEs
 before 0:8.0.26-1.el10_0
0:8.0.26-1.el10_0
dotnet-apphost-pack-8.0
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 4 CVEs
 before 0:8.0.26-1.el10_0
0:8.0.26-1.el10_0
dotnet-apphost-pack-8.0-debuginfo
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 4 CVEs
 before 0:8.0.26-1.el10_0
0:8.0.26-1.el10_0
dotnet-hostfxr-8.0
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 4 CVEs
 before 0:8.0.26-1.el10_0
0:8.0.26-1.el10_0
dotnet-hostfxr-8.0-debuginfo
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 4 CVEs
 before 0:8.0.26-1.el10_0
0:8.0.26-1.el10_0
dotnet-runtime-8.0
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 4 CVEs
 before 0:8.0.26-1.el10_0
0:8.0.26-1.el10_0
dotnet-runtime-8.0-debuginfo
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 4 CVEs
 before 0:8.0.26-1.el10_0
0:8.0.26-1.el10_0
dotnet-runtime-dbg-8.0
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 4 CVEs
 before 0:8.0.26-1.el10_0
0:8.0.26-1.el10_0
dotnet-sdk-8.0
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 4 CVEs
 before 0:8.0.126-1.el10_0
0:8.0.126-1.el10_0
dotnet-sdk-8.0-debuginfo
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 4 CVEs
 before 0:8.0.126-1.el10_0
0:8.0.126-1.el10_0
dotnet-sdk-dbg-8.0
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 4 CVEs
 before 0:8.0.126-1.el10_0
0:8.0.126-1.el10_0
dotnet-targeting-pack-8.0
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 4 CVEs
 before 0:8.0.26-1.el10_0
0:8.0.26-1.el10_0
dotnet-templates-8.0
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 4 CVEs
 before 0:8.0.126-1.el10_0
0:8.0.126-1.el10_0
dotnet8.0
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 4 CVEs
 before 0:8.0.126-1.el10_0
0:8.0.126-1.el10_0
dotnet8.0-debugsource
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 4 CVEs
 before 0:8.0.126-1.el10_0
0:8.0.126-1.el10_0
dotnet-sdk-8.0-source-built-artifacts
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 4 CVEs
 before 0:8.0.126-1.el10_0
0:8.0.126-1.el10_0
aspnetcore-runtime-9.0
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 4 CVEs
 before 0:9.0.15-1.el9_6
0:9.0.15-1.el9_6
aspnetcore-runtime-dbg-9.0
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 4 CVEs
 before 0:9.0.15-1.el9_6
0:9.0.15-1.el9_6
aspnetcore-targeting-pack-9.0
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 4 CVEs
 before 0:9.0.15-1.el9_6
0:9.0.15-1.el9_6
dotnet-apphost-pack-9.0
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 4 CVEs
 before 0:9.0.15-1.el9_6
0:9.0.15-1.el9_6
dotnet-apphost-pack-9.0-debuginfo
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 4 CVEs
 before 0:9.0.15-1.el9_6
0:9.0.15-1.el9_6
dotnet-host
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 4 CVEs
 before 0:9.0.15-1.el9_6
0:9.0.15-1.el9_6
dotnet-host-debuginfo
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 4 CVEs
 before 0:9.0.15-1.el9_6
0:9.0.15-1.el9_6
dotnet-hostfxr-9.0
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 4 CVEs
 before 0:9.0.15-1.el9_6
0:9.0.15-1.el9_6
dotnet-hostfxr-9.0-debuginfo
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 4 CVEs
 before 0:9.0.15-1.el9_6
0:9.0.15-1.el9_6
dotnet-runtime-9.0
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 4 CVEs
 before 0:9.0.15-1.el9_6
0:9.0.15-1.el9_6
dotnet-runtime-9.0-debuginfo
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 4 CVEs
 before 0:9.0.15-1.el9_6
0:9.0.15-1.el9_6
dotnet-runtime-dbg-9.0
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 4 CVEs
 before 0:9.0.15-1.el9_6
0:9.0.15-1.el9_6
dotnet-sdk-9.0
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 4 CVEs
 before 0:9.0.116-1.el9_6
0:9.0.116-1.el9_6
dotnet-sdk-9.0-debuginfo
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 4 CVEs
 before 0:9.0.116-1.el9_6
0:9.0.116-1.el9_6
dotnet-sdk-aot-9.0
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 4 CVEs
 before 0:9.0.116-1.el9_6
0:9.0.116-1.el9_6
dotnet-sdk-aot-9.0-debuginfo
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 4 CVEs
 before 0:9.0.116-1.el9_6
0:9.0.116-1.el9_6
dotnet-sdk-dbg-9.0
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 4 CVEs
 before 0:9.0.116-1.el9_6
0:9.0.116-1.el9_6
dotnet-targeting-pack-9.0
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 4 CVEs
 before 0:9.0.15-1.el9_6
0:9.0.15-1.el9_6
dotnet-templates-9.0
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 4 CVEs
 before 0:9.0.116-1.el9_6
0:9.0.116-1.el9_6
dotnet9.0
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 4 CVEs
 before 0:9.0.116-1.el9_6
0:9.0.116-1.el9_6
dotnet9.0-debuginfo
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 4 CVEs
 before 0:9.0.116-1.el9_6
0:9.0.116-1.el9_6
dotnet9.0-debugsource
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 4 CVEs
 before 0:9.0.116-1.el9_6
0:9.0.116-1.el9_6
netstandard-targeting-pack-2.1
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 4 CVEs
 before 0:9.0.116-1.el9_6
0:9.0.116-1.el9_6
dotnet-apphost-pack-9.0-debuginfo
Red Hat:rhel_eus:9.6::crb
From an advisory covering 4 CVEs
 before 0:9.0.15-1.el9_6
0:9.0.15-1.el9_6
dotnet-host-debuginfo
Red Hat:rhel_eus:9.6::crb
From an advisory covering 4 CVEs
 before 0:9.0.15-1.el9_6
0:9.0.15-1.el9_6
dotnet-hostfxr-9.0-debuginfo
Red Hat:rhel_eus:9.6::crb
From an advisory covering 4 CVEs
 before 0:9.0.15-1.el9_6
0:9.0.15-1.el9_6
dotnet-runtime-9.0-debuginfo
Red Hat:rhel_eus:9.6::crb
From an advisory covering 4 CVEs
 before 0:9.0.15-1.el9_6
0:9.0.15-1.el9_6
dotnet-sdk-9.0-debuginfo
Red Hat:rhel_eus:9.6::crb
From an advisory covering 4 CVEs
 before 0:9.0.116-1.el9_6
0:9.0.116-1.el9_6
dotnet-sdk-9.0-source-built-artifacts
Red Hat:rhel_eus:9.6::crb
From an advisory covering 4 CVEs
 before 0:9.0.116-1.el9_6
0:9.0.116-1.el9_6
dotnet-sdk-aot-9.0-debuginfo
Red Hat:rhel_eus:9.6::crb
From an advisory covering 4 CVEs
 before 0:9.0.116-1.el9_6
0:9.0.116-1.el9_6
dotnet9.0-debuginfo
Red Hat:rhel_eus:9.6::crb
From an advisory covering 4 CVEs
 before 0:9.0.116-1.el9_6
0:9.0.116-1.el9_6
dotnet9.0-debugsource
Red Hat:rhel_eus:9.6::crb
From an advisory covering 4 CVEs
 before 0:9.0.116-1.el9_6
0:9.0.116-1.el9_6
aspnetcore-runtime-8.0
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 4 CVEs
 before 0:8.0.26-1.el9_6
0:8.0.26-1.el9_6
aspnetcore-runtime-dbg-8.0
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 4 CVEs
 before 0:8.0.26-1.el9_6
0:8.0.26-1.el9_6
aspnetcore-targeting-pack-8.0
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 4 CVEs
 before 0:8.0.26-1.el9_6
0:8.0.26-1.el9_6
dotnet-apphost-pack-8.0
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 4 CVEs
 before 0:8.0.26-1.el9_6
0:8.0.26-1.el9_6
dotnet-apphost-pack-8.0-debuginfo
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 4 CVEs
 before 0:8.0.26-1.el9_6
0:8.0.26-1.el9_6
dotnet-hostfxr-8.0
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 4 CVEs
 before 0:8.0.26-1.el9_6
0:8.0.26-1.el9_6
dotnet-hostfxr-8.0-debuginfo
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 4 CVEs
 before 0:8.0.26-1.el9_6
0:8.0.26-1.el9_6
dotnet-runtime-8.0
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 4 CVEs
 before 0:8.0.26-1.el9_6
0:8.0.26-1.el9_6
dotnet-runtime-8.0-debuginfo
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 4 CVEs
 before 0:8.0.26-1.el9_6
0:8.0.26-1.el9_6
dotnet-runtime-dbg-8.0
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 4 CVEs
 before 0:8.0.26-1.el9_6
0:8.0.26-1.el9_6
dotnet-sdk-8.0
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 4 CVEs
 before 0:8.0.126-1.el9_6
0:8.0.126-1.el9_6
dotnet-sdk-8.0-debuginfo
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 4 CVEs
 before 0:8.0.126-1.el9_6
0:8.0.126-1.el9_6
dotnet-sdk-dbg-8.0
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 4 CVEs
 before 0:8.0.126-1.el9_6
0:8.0.126-1.el9_6
dotnet-targeting-pack-8.0
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 4 CVEs
 before 0:8.0.26-1.el9_6
0:8.0.26-1.el9_6
dotnet-templates-8.0
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 4 CVEs
 before 0:8.0.126-1.el9_6
0:8.0.126-1.el9_6
dotnet8.0
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 4 CVEs
 before 0:8.0.126-1.el9_6
0:8.0.126-1.el9_6
dotnet8.0-debuginfo
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 4 CVEs
 before 0:8.0.126-1.el9_6
0:8.0.126-1.el9_6
dotnet8.0-debugsource
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 4 CVEs
 before 0:8.0.126-1.el9_6
0:8.0.126-1.el9_6
dotnet-apphost-pack-8.0-debuginfo
Red Hat:rhel_eus:9.6::crb
From an advisory covering 4 CVEs
 before 0:8.0.26-1.el9_6
0:8.0.26-1.el9_6
dotnet-hostfxr-8.0-debuginfo
Red Hat:rhel_eus:9.6::crb
From an advisory covering 4 CVEs
 before 0:8.0.26-1.el9_6
0:8.0.26-1.el9_6
dotnet-runtime-8.0-debuginfo
Red Hat:rhel_eus:9.6::crb
From an advisory covering 4 CVEs
 before 0:8.0.26-1.el9_6
0:8.0.26-1.el9_6
dotnet-sdk-8.0-debuginfo
Red Hat:rhel_eus:9.6::crb
From an advisory covering 4 CVEs
 before 0:8.0.126-1.el9_6
0:8.0.126-1.el9_6
dotnet-sdk-8.0-source-built-artifacts
Red Hat:rhel_eus:9.6::crb
From an advisory covering 4 CVEs
 before 0:8.0.126-1.el9_6
0:8.0.126-1.el9_6
dotnet8.0-debuginfo
Red Hat:rhel_eus:9.6::crb
From an advisory covering 4 CVEs
 before 0:8.0.126-1.el9_6
0:8.0.126-1.el9_6
dotnet8.0-debugsource
Red Hat:rhel_eus:9.6::crb
From an advisory covering 4 CVEs
 before 0:8.0.126-1.el9_6
0:8.0.126-1.el9_6
aspnetcore-runtime-8.0
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 4 CVEs
 before 0:8.0.26-1.el9_4
0:8.0.26-1.el9_4
aspnetcore-runtime-dbg-8.0
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 4 CVEs
 before 0:8.0.26-1.el9_4
0:8.0.26-1.el9_4
aspnetcore-targeting-pack-8.0
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 4 CVEs
 before 0:8.0.26-1.el9_4
0:8.0.26-1.el9_4
dotnet-apphost-pack-8.0
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 4 CVEs
 before 0:8.0.26-1.el9_4
0:8.0.26-1.el9_4
dotnet-apphost-pack-8.0-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 4 CVEs
 before 0:8.0.26-1.el9_4
0:8.0.26-1.el9_4
dotnet-host
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 4 CVEs
 before 0:8.0.26-1.el9_4
0:8.0.26-1.el9_4
dotnet-host-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 4 CVEs
 before 0:8.0.26-1.el9_4
0:8.0.26-1.el9_4
dotnet-hostfxr-8.0
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 4 CVEs
 before 0:8.0.26-1.el9_4
0:8.0.26-1.el9_4
dotnet-hostfxr-8.0-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 4 CVEs
 before 0:8.0.26-1.el9_4
0:8.0.26-1.el9_4
dotnet-runtime-8.0
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 4 CVEs
 before 0:8.0.26-1.el9_4
0:8.0.26-1.el9_4
dotnet-runtime-8.0-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 4 CVEs
 before 0:8.0.26-1.el9_4
0:8.0.26-1.el9_4
dotnet-runtime-dbg-8.0
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 4 CVEs
 before 0:8.0.26-1.el9_4
0:8.0.26-1.el9_4
dotnet-sdk-8.0
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 4 CVEs
 before 0:8.0.126-1.el9_4
0:8.0.126-1.el9_4
dotnet-sdk-8.0-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 4 CVEs
 before 0:8.0.126-1.el9_4
0:8.0.126-1.el9_4
dotnet-sdk-dbg-8.0
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 4 CVEs
 before 0:8.0.126-1.el9_4
0:8.0.126-1.el9_4
dotnet-targeting-pack-8.0
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 4 CVEs
 before 0:8.0.26-1.el9_4
0:8.0.26-1.el9_4
dotnet-templates-8.0
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 4 CVEs
 before 0:8.0.126-1.el9_4
0:8.0.126-1.el9_4
dotnet10.0
Rocky Linux:10
From an advisory covering 4 CVEs
 before 0:10.0.106-1.el10_1
0:10.0.106-1.el10_1
dotnet8.0
Rocky Linux:8
From an advisory covering 4 CVEs
 before 0:8.0.126-1.el8_10
0:8.0.126-1.el8_10
dotnet8.0
Rocky Linux:9
From an advisory covering 4 CVEs
 before 0:8.0.126-1.el9_7
0:8.0.126-1.el9_7
dotnet8.0
Rocky Linux:10
From an advisory covering 4 CVEs
 before 0:8.0.126-1.el10_1
0:8.0.126-1.el10_1
dotnet10.0
Rocky Linux:9
From an advisory covering 4 CVEs
 before 0:10.0.106-1.el9_7
0:10.0.106-1.el9_7
dotnet9.0
Rocky Linux:10
From an advisory covering 4 CVEs
 before 0:9.0.116-1.el10_1
0:9.0.116-1.el10_1
dotnet10.0
Rocky Linux:8
From an advisory covering 4 CVEs
 before 0:10.0.106-1.el8_10
0:10.0.106-1.el8_10
dotnet9.0
Rocky Linux:9
From an advisory covering 4 CVEs
 before 0:9.0.116-1.el9_7
0:9.0.116-1.el9_7
dotnet9.0
Rocky Linux:8
From an advisory covering 4 CVEs
 before 0:9.0.116-1.el8_10
0:9.0.116-1.el8_10
dotnet6
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.0.108-0ubuntu1~22.04.16.0.109-0ubuntu1~22.04.16.0.110-0ubuntu1~22.04.16.0.111-0ubuntu1~22.04.16.0.113-0ubuntu1~22.04.1
Show 16 moreShow less
6.0.116-0ubuntu1~22.04.16.0.118-0ubuntu1~22.04.16.0.119-0ubuntu1~22.04.16.0.120-0ubuntu1~22.04.16.0.121-0ubuntu1~22.04.16.0.122-0ubuntu1~22.04.16.0.123-0ubuntu1~22.04.16.0.124-0ubuntu1~22.04.16.0.125-0ubuntu1~22.04.16.0.126-0ubuntu1~22.04.16.0.127-0ubuntu1~22.04.16.0.128-0ubuntu1~22.04.26.0.132-0ubuntu1~22.04.16.0.133-0ubuntu1~22.04.16.0.135-0ubuntu1~22.04.16.0.136-0ubuntu1~22.04.1
 None known
dotnet7
Ubuntu:22.04:LTS
 All versions, plus listed versions
7.0.105-0ubuntu1~22.04.17.0.107-0ubuntu1~22.04.17.0.108-0ubuntu1~22.04.17.0.109-0ubuntu1~22.04.17.0.110-0ubuntu1~22.04.1
Show 9 moreShow less
7.0.111-0ubuntu1~22.04.17.0.112-0ubuntu1~22.04.17.0.113-0ubuntu1~22.04.17.0.114-0ubuntu1~22.04.17.0.115-0ubuntu1~22.04.17.0.116-0ubuntu1~22.04.17.0.117-0ubuntu1~22.04.17.0.117-0ubuntu1~22.04.27.0.119-0ubuntu1~22.04.1
 None known
dotnet8
Ubuntu:22.04:LTS
 before 8.0.126-8.0.26-0ubuntu1~22.04.1, plus listed versions
8.0.102-8.0.2-0ubuntu1~22.04.18.0.103-8.0.3-0ubuntu1~22.04.18.0.103-8.0.3-0ubuntu1~22.04.28.0.105-8.0.5-0ubuntu1~22.04.18.0.107-8.0.7-0ubuntu1~22.04.1
Show 16 moreShow less
8.0.108-8.0.8-0ubuntu1~22.04.18.0.110-8.0.10-0ubuntu1~22.04.18.0.111-8.0.11-0ubuntu1~22.04.18.0.112-8.0.12-0ubuntu1~22.04.18.0.114-8.0.14-0ubuntu1~22.04.18.0.115-8.0.15-0ubuntu1~22.04.18.0.116-8.0.16-0ubuntu1~22.04.18.0.117-8.0.17-0ubuntu1~22.04.18.0.118-8.0.18-0ubuntu1~22.04.18.0.119-8.0.19-0ubuntu1~22.04.18.0.120-8.0.20-0ubuntu1~22.04.18.0.121-8.0.21-0ubuntu1~22.04.18.0.122-8.0.22-0ubuntu1~22.04.18.0.123-8.0.23-0ubuntu1~22.04.18.0.124-8.0.24-0ubuntu1~22.04.18.0.125-8.0.25-0ubuntu1~22.04.1
8.0.126-8.0.26-0ubuntu1~22.04.1
dotnet10
Ubuntu:24.04:LTS
 before 10.0.106-10.0.6-0ubuntu1~24.04.1, plus listed versions
10.0.100-10.0.0-0ubuntu1~24.04.110.0.101-10.0.1-0ubuntu1~24.04.210.0.103-10.0.3-0ubuntu1~24.04.110.0.104-10.0.4-0ubuntu1~24.04.110.0.105-10.0.5-0ubuntu1~24.04.1
10.0.106-10.0.6-0ubuntu1~24.04.1
dotnet8
Ubuntu:24.04:LTS
 before 8.0.126-8.0.26-0ubuntu1~24.04.1, plus listed versions
8.0.100-8.0.0~rc1-0ubuntu18.0.100-8.0.0~rc2-0ubuntu18.0.100-8.0.0~rc2-0ubuntu28.0.100-8.0.0-0ubuntu18.0.100-8.0.0-0ubuntu2
Show 25 moreShow less
8.0.101-8.0.1-0ubuntu18.0.101-8.0.1-0ubuntu28.0.102-8.0.2-0ubuntu18.0.103-8.0.3-0ubuntu28.0.103-8.0.3-0ubuntu38.0.104-8.0.4-0ubuntu18.0.105-8.0.5-0ubuntu1~24.04.18.0.107-8.0.7-0ubuntu1~24.04.18.0.108-8.0.8-0ubuntu1~24.04.18.0.108-8.0.8-0ubuntu1~24.04.28.0.110-8.0.10-0ubuntu1~24.04.18.0.111-8.0.11-0ubuntu1~24.04.18.0.112-8.0.12-0ubuntu1~24.04.18.0.114-8.0.14-0ubuntu1~24.04.18.0.115-8.0.15-0ubuntu1~24.04.18.0.116-8.0.16-0ubuntu1~24.04.18.0.117-8.0.17-0ubuntu1~24.04.18.0.118-8.0.18-0ubuntu1~24.04.18.0.119-8.0.19-0ubuntu1~24.04.18.0.120-8.0.20-0ubuntu1~24.04.18.0.121-8.0.21-0ubuntu1~24.04.18.0.122-8.0.22-0ubuntu1~24.04.18.0.123-8.0.23-0ubuntu1~24.04.18.0.124-8.0.24-0ubuntu1~24.04.18.0.125-8.0.25-0ubuntu1~24.04.1
8.0.126-8.0.26-0ubuntu1~24.04.1
dotnet10
Ubuntu:25.10
 before 10.0.106-10.0.6-0ubuntu1~25.10.1, plus listed versions
10.0.100-10.0.0~rc1-0ubuntu110.0.100-10.0.0~rc2-0ubuntu1~25.10.210.0.100-10.0.0-0ubuntu1~25.10.110.0.101-10.0.1-0ubuntu1~25.10.210.0.103-10.0.3-0ubuntu1~25.10.110.0.104-10.0.4-0ubuntu1~25.10.110.0.105-10.0.5-0ubuntu1~25.10.1
10.0.106-10.0.6-0ubuntu1~25.10.1
dotnet8
Ubuntu:25.10
 before 8.0.126-8.0.26-0ubuntu1~25.10.1, plus listed versions
8.0.115-8.0.15-0ubuntu18.0.116-8.0.16-0ubuntu18.0.117-8.0.17-0ubuntu18.0.118-8.0.18-0ubuntu18.0.119-8.0.19-0ubuntu1
Show 6 moreShow less
8.0.120-8.0.20-0ubuntu18.0.121-8.0.21-0ubuntu1~25.10.18.0.122-8.0.22-0ubuntu1~25.10.18.0.123-8.0.23-0ubuntu1~25.10.18.0.124-8.0.24-0ubuntu1~25.10.18.0.125-8.0.25-0ubuntu1~25.10.1
8.0.126-8.0.26-0ubuntu1~25.10.1
dotnet9
Ubuntu:25.10
 before 9.0.116-9.0.15-0ubuntu1~25.10.1, plus listed versions
9.0.105-9.0.4-0ubuntu19.0.106-9.0.5-0ubuntu19.0.107-9.0.6-0ubuntu19.0.108-9.0.7-0ubuntu19.0.109-9.0.8-0ubuntu1
Show 6 moreShow less
9.0.110-9.0.9-0ubuntu19.0.111-9.0.10-0ubuntu1~25.10.19.0.112-9.0.11-0ubuntu1~25.10.19.0.113-9.0.12-0ubuntu1~25.10.19.0.114-9.0.13-0ubuntu1~25.10.19.0.115-9.0.14-0ubuntu1~25.10.1
9.0.116-9.0.15-0ubuntu1~25.10.1
dotnet10
Ubuntu:26.10
 before 10.0.107-10.0.7-0ubuntu1~26.04.1, plus listed versions
10.0.105-10.0.5-0ubuntu1
10.0.107-10.0.7-0ubuntu1~26.04.1
dotnet10
Ubuntu:26.04:LTS
 before 10.0.107-10.0.7-0ubuntu1~26.04.1, plus listed versions
10.0.100-10.0.0~rc1-0ubuntu110.0.100-10.0.0~rc2-0ubuntu110.0.100-10.0.0-0ubuntu110.0.100-10.0.0-0ubuntu210.0.101-10.0.1-0ubuntu1
Show 6 moreShow less
10.0.101-10.0.1-0ubuntu210.0.101-10.0.1-0ubuntu310.0.102-10.0.2-0ubuntu110.0.103-10.0.3-0ubuntu110.0.104-10.0.4-0ubuntu110.0.105-10.0.5-0ubuntu1
10.0.107-10.0.7-0ubuntu1~26.04.1

History

History
RecordedChangedSources
affected, facts
affected, aliases, referencesOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-32178 is a high vulnerability (CVSS 7.5) in Microsoft .net, published April 14, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.28%, the 83rd percentile. Fixed in Microsoft.NetCore.App.Runtime.linux-arm 10.0.6.

References

Show 100 moreShow less
This page doesn't list everything

Left out here: 247 package rows and the rest of 2 source descriptions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open