Every CVE Search/ Get API key

CVE-2026-58649

.NET Information Disclosure Vulnerability

6.5 MediumFix available

Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
High
Integrity
None
Availability
None

Exploit likelihood

0.36%Up 0.1 points since Sep 9, 2026
90%50%10%1%

What each source reports

CVE List Score used 6.5

.NET Information Disclosure Vulnerability

Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.

Record
CVE-2026-58649
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
Weakness
CWE-346
Updated
2026-11-02
EUVDEUVD-2026-73722 6.5

Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.

Record
EUVD-2026-73722
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
Updated
2026-11-02
GitHub AdvisoriesGHSA-44g5-m8vm-448v 6.5

Origin validation error in .NET allows an unauthorized attacker to disclose information over a...

Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.

Record
GHSA-44g5-m8vm-448v
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Weakness
CWE-346
Updated
2026-11-02
NVD 6.5

Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.

Record
CVE-2026-58649
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Weakness
CWE-346
Updated
2026-11-02
OSVALPINE-CVE-2026-58649 6.5

Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.

Record
ALPINE-CVE-2026-58649
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Updated
2026-11-03
OSVBELL-CVE-2026-58649 6.5
Record
BELL-CVE-2026-58649
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Updated
2026-11-02
Show 32 moreShow less
OSVRHSA-2026:66863 7.0

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:66863
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:67524 6.5

Red Hat Security Advisory: .NET 8.0 security, bug fix, and enhancement update

Record
RHSA-2026:67524
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVRHSA-2026:67525 6.5

Red Hat Security Advisory: .NET 8.0 security, bug fix, and enhancement update

Record
RHSA-2026:67525
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVRHSA-2026:67528 7.0

Red Hat Security Advisory: .NET 9.0 security, bug fix, and enhancement update

Record
RHSA-2026:67528
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:67530 7.0

Red Hat Security Advisory: .NET 10.0 security, bug fix, and enhancement update

Record
RHSA-2026:67530
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:67613 7.0

Red Hat Security Advisory: .NET 10.0 security, bug fix, and enhancement update

Record
RHSA-2026:67613
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:67614 7.0

Red Hat Security Advisory: .NET 9.0 security, bug fix, and enhancement update

Record
RHSA-2026:67614
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:68233 7.0

Red Hat Security Advisory: .NET 9.0 security, bug fix, and enhancement update

Record
RHSA-2026:68233
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:68316 6.5

Red Hat Security Advisory: .NET 8.0 security, bug fix, and enhancement update

Record
RHSA-2026:68316
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVRHSA-2026:68676 7.0

Red Hat Security Advisory: .NET 10.0 security, bug fix, and enhancement update

Record
RHSA-2026:68676
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:76978 6.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:76978
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVRHSA-2026:77004 6.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:77004
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVRLSA-2026:67524 6.5

Moderate: .NET 8.0 security, bug fix, and enhancement update

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything.

SDK version: 8.0.131 Runtime version: 8.0.31

Security Fix(es):

  • dotnet10.0: dotnet9.0: dotnet8.0: .NET Information Disclosure Vulnerability (CVE-2026-58649)

Bug Fix(es) and Enhancement(s):

  • Update .NET 8.0 to SDK 8.0.131 and Runtime 8.0.31 [rhel-9.8.z] (JIRA:Rocky Linux-252247)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:67524
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVRLSA-2026:67525 6.5

Moderate: .NET 8.0 security, bug fix, and enhancement update

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything.

SDK version: 8.0.131 Runtime version: 8.0.31

Security Fix(es):

  • dotnet10.0: dotnet9.0: dotnet8.0: .NET Information Disclosure Vulnerability (CVE-2026-58649)

Bug Fix(es) and Enhancement(s):

  • Update .NET 8.0 to SDK 8.0.131 and Runtime 8.0.31 [rhel-10.2.z] (JIRA:Rocky Linux-252248)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:67525
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVRLSA-2026:67528 7.0

Important: .NET 9.0 security, bug fix, and enhancement update

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything.

SDK version: 9.0.121 Runtime version: 9.0.20

Security Fix(es):

  • dotnet10.0: dotnet9.0: dotnet8.0: .NET Information Disclosure Vulnerability (CVE-2026-58649)

  • dotnet10.0: dotnet9.0: .NET Elevation of Privilege Vulnerability (CVE-2026-69806)

Bug Fix(es) and Enhancement(s):

  • Update .NET 9.0 to SDK 9.0.121 and Runtime 9.0.20 [rhel-10.2.z] (JIRA:Rocky Linux-252279)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:67528
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:67530 7.0

Important: .NET 10.0 security, bug fix, and enhancement update

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything.

SDK version: 10.0.112 Runtime version: 10.0.12

Security Fix(es):

  • dotnet10.0: dotnet9.0: dotnet8.0: .NET Information Disclosure Vulnerability (CVE-2026-58649)

  • dotnet10.0: dotnet9.0: .NET Elevation of Privilege Vulnerability (CVE-2026-69806)

Bug Fix(es) and Enhancement(s):

  • Update .NET 10.0 to SDK 10.0.112 and Runtime 10.0.12 [rhel-10.2.z] (JIRA:Rocky Linux-252320)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:67530
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:67613 7.0

Important: .NET 10.0 security, bug fix, and enhancement update

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything.

SDK version: 10.0.112 Runtime version: 10.0.12

Security Fix(es):

  • dotnet10.0: dotnet9.0: dotnet8.0: .NET Information Disclosure Vulnerability (CVE-2026-58649)

  • dotnet10.0: dotnet9.0: .NET Elevation of Privilege Vulnerability (CVE-2026-69806)

Bug Fix(es) and Enhancement(s):

  • Update .NET 10.0 to SDK 10.0.112 and Runtime 10.0.12 [rhel-9.8.z] (JIRA:Rocky Linux-252319)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:67613
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:67614 7.0

Important: .NET 9.0 security, bug fix, and enhancement update

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything.

SDK version: 9.0.121 Runtime version: 9.0.20

Security Fix(es):

  • dotnet10.0: dotnet9.0: dotnet8.0: .NET Information Disclosure Vulnerability (CVE-2026-58649)

  • dotnet10.0: dotnet9.0: .NET Elevation of Privilege Vulnerability (CVE-2026-69806)

Bug Fix(es) and Enhancement(s):

  • Update .NET 9.0 to SDK 9.0.121 and Runtime 9.0.20 [rhel-9.8.z] (JIRA:Rocky Linux-252278)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:67614
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:68233 7.0

Important: .NET 9.0 security, bug fix, and enhancement update

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything.

SDK version: 9.0.121 Runtime version: 9.0.20

Security Fix(es):

  • dotnet10.0: dotnet9.0: dotnet8.0: .NET Information Disclosure Vulnerability (CVE-2026-58649)

  • dotnet10.0: dotnet9.0: .NET Elevation of Privilege Vulnerability (CVE-2026-69806)

Bug Fix(es) and Enhancement(s):

  • Update .NET 9.0 to SDK 9.0.121 and Runtime 9.0.20 (JIRA:Rocky Linux-252274)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:68233
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:68316 6.5

Moderate: .NET 8.0 security, bug fix, and enhancement update

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything.

SDK version: 8.0.131 Runtime version: 8.0.31

Security Fix(es):

  • dotnet10.0: dotnet9.0: dotnet8.0: .NET Information Disclosure Vulnerability (CVE-2026-58649)

Bug Fix(es) and Enhancement(s):

  • Update .NET 8.0 to SDK 8.0.131 and Runtime 8.0.31 (JIRA:Rocky Linux-252244)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:68316
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVRLSA-2026:68676 7.0

Important: .NET 10.0 security, bug fix, and enhancement update

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything.

SDK version: 10.0.112 Runtime version: 10.0.12

Security Fix(es):

  • dotnet10.0: dotnet9.0: dotnet8.0: .NET Information Disclosure Vulnerability (CVE-2026-58649)

  • dotnet10.0: dotnet9.0: .NET Elevation of Privilege Vulnerability (CVE-2026-69806)

Bug Fix(es) and Enhancement(s):

  • Update .NET 10.0 to SDK 10.0.112 and Runtime 10.0.12 (JIRA:Rocky Linux-252315)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:68676
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2026-58649 6.5

Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.

Record
UBUNTU-CVE-2026-58649
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVALSA-2026:67524 No score

Moderate: .NET 8.0 security, bug fix, and enhancement update

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything.

SDK version: 8.0.131
Runtime version: 8.0.31

Security Fix(es):

  • dotnet10.0: dotnet9.0: dotnet8.0: .NET Information Disclosure Vulnerability (CVE-2026-58649)

Bug Fix(es) and Enhancement(s):

  • Update .NET 8.0 to SDK 8.0.131 and Runtime 8.0.31 [almalinux-9.8.z] (JIRA:AlmaLinux-252247)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:67524
Updated
2026-11-02
OSVALSA-2026:67525 No score

Moderate: .NET 8.0 security, bug fix, and enhancement update

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything.

SDK version: 8.0.131
Runtime version: 8.0.31

Security Fix(es):

  • dotnet10.0: dotnet9.0: dotnet8.0: .NET Information Disclosure Vulnerability (CVE-2026-58649)

Bug Fix(es) and Enhancement(s):

  • Update .NET 8.0 to SDK 8.0.131 and Runtime 8.0.31 [almalinux-10.2.z] (JIRA:AlmaLinux-252248)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:67525
Updated
2026-11-02
OSVALSA-2026:67528 No score

Important: .NET 9.0 security, bug fix, and enhancement update

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything.

SDK version: 9.0.121
Runtime version: 9.0.20

Security Fix(es):

  • dotnet10.0: dotnet9.0: dotnet8.0: .NET Information Disclosure Vulnerability (CVE-2026-58649)
  • dotnet10.0: dotnet9.0: .NET Elevation of Privilege Vulnerability (CVE-2026-69806)

Bug Fix(es) and Enhancement(s):

  • Update .NET 9.0 to SDK 9.0.121 and Runtime 9.0.20 [almalinux-10.2.z] (JIRA:AlmaLinux-252279)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:67528
Updated
2026-11-02
OSVALSA-2026:67530 No score

Important: .NET 10.0 security, bug fix, and enhancement update

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything.

SDK version: 10.0.112
Runtime version: 10.0.12

Security Fix(es):

  • dotnet10.0: dotnet9.0: dotnet8.0: .NET Information Disclosure Vulnerability (CVE-2026-58649)
  • dotnet10.0: dotnet9.0: .NET Elevation of Privilege Vulnerability (CVE-2026-69806)

Bug Fix(es) and Enhancement(s):

  • Update .NET 10.0 to SDK 10.0.112 and Runtime 10.0.12 [almalinux-10.2.z] (JIRA:AlmaLinux-252320)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:67530
Updated
2026-11-02
OSVALSA-2026:67613 No score

Important: .NET 10.0 security, bug fix, and enhancement update

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything.

SDK version: 10.0.112
Runtime version: 10.0.12

Security Fix(es):

  • dotnet10.0: dotnet9.0: dotnet8.0: .NET Information Disclosure Vulnerability (CVE-2026-58649)
  • dotnet10.0: dotnet9.0: .NET Elevation of Privilege Vulnerability (CVE-2026-69806)

Bug Fix(es) and Enhancement(s):

  • Update .NET 10.0 to SDK 10.0.112 and Runtime 10.0.12 [almalinux-9.8.z] (JIRA:AlmaLinux-252319)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:67613
Updated
2026-11-02
OSVALSA-2026:67614 No score

Important: .NET 9.0 security, bug fix, and enhancement update

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything.

SDK version: 9.0.121
Runtime version: 9.0.20

Security Fix(es):

  • dotnet10.0: dotnet9.0: dotnet8.0: .NET Information Disclosure Vulnerability (CVE-2026-58649)
  • dotnet10.0: dotnet9.0: .NET Elevation of Privilege Vulnerability (CVE-2026-69806)

Bug Fix(es) and Enhancement(s):

  • Update .NET 9.0 to SDK 9.0.121 and Runtime 9.0.20 [almalinux-9.8.z] (JIRA:AlmaLinux-252278)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:67614
Updated
2026-11-02
OSVALSA-2026:68233 No score

Important: .NET 9.0 security, bug fix, and enhancement update

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything.

SDK version: 9.0.121
Runtime version: 9.0.20

Security Fix(es):

  • dotnet10.0: dotnet9.0: dotnet8.0: .NET Information Disclosure Vulnerability (CVE-2026-58649)
  • dotnet10.0: dotnet9.0: .NET Elevation of Privilege Vulnerability (CVE-2026-69806)

Bug Fix(es) and Enhancement(s):

  • Update .NET 9.0 to SDK 9.0.121 and Runtime 9.0.20 (JIRA:AlmaLinux-252274)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:68233
Updated
2026-11-02
OSVALSA-2026:68316 No score

Moderate: .NET 8.0 security, bug fix, and enhancement update

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything.

SDK version: 8.0.131
Runtime version: 8.0.31

Security Fix(es):

  • dotnet10.0: dotnet9.0: dotnet8.0: .NET Information Disclosure Vulnerability (CVE-2026-58649)

Bug Fix(es) and Enhancement(s):

  • Update .NET 8.0 to SDK 8.0.131 and Runtime 8.0.31 (JIRA:AlmaLinux-252244)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:68316
Updated
2026-11-02
OSVALSA-2026:68676 No score

Important: .NET 10.0 security, bug fix, and enhancement update

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything.

SDK version: 10.0.112
Runtime version: 10.0.12

Security Fix(es):

  • dotnet10.0: dotnet9.0: dotnet8.0: .NET Information Disclosure Vulnerability (CVE-2026-58649)
  • dotnet10.0: dotnet9.0: .NET Elevation of Privilege Vulnerability (CVE-2026-69806)

Bug Fix(es) and Enhancement(s):

  • Update .NET 10.0 to SDK 10.0.112 and Runtime 10.0.12 (JIRA:AlmaLinux-252315)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:68676
Updated
2026-11-02
OSVUSN-8740-1 No score

dotnet8, dotnet10 vulnerabilities

Weeraphat Srisutham discovered that the .NET watch BrowserRefreshServer did not properly validate cross-origin WebSocket connections. An attacker could possibly use this issue to expose sensitive information. (CVE-2026-58649)

Rajesh Chada discovered that the .NET watch AspireServerService improperly exposed information through the use of certain arguments. An attacker could possibly use this issue to elevate privileges and execute arbitrary code. (CVE-2026-69806)

Record
USN-8740-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
dotnet10-runtime
Alpine:v3.23
 before 10.0.13-r0
10.0.13-r0
dotnet10-runtime
Alpine:v3.24
 before 10.0.12-r0
10.0.12-r0
dotnet8-runtime
Alpine:v3.22
 before 8.0.31-r0
8.0.31-r0
dotnet8-runtime
Alpine:v3.23
 before 8.0.31-r0
8.0.31-r0
dotnet8-runtime
Alpine:v3.24
 before 8.0.31-r0
8.0.31-r0
dotnet9-runtime
Alpine:v3.22
 before 9.0.20-r0
9.0.20-r0
dotnet9-runtime
Alpine:v3.23
 before 9.0.20-r0
9.0.20-r0
dotnet9-runtime
Alpine:v3.24
 before 9.0.20-r0
9.0.20-r0
aspnetcore-runtime-8.0
AlmaLinux:9
 before 8.0.31-1.el9_8
8.0.31-1.el9_8
aspnetcore-runtime-dbg-8.0
AlmaLinux:9
 before 8.0.31-1.el9_8
8.0.31-1.el9_8
Show 290 moreShow less
Affected packages
PackageAffectedFixed
aspnetcore-targeting-pack-8.0
AlmaLinux:9
 before 8.0.31-1.el9_8
8.0.31-1.el9_8
dotnet-apphost-pack-8.0
AlmaLinux:9
 before 8.0.31-1.el9_8
8.0.31-1.el9_8
dotnet-hostfxr-8.0
AlmaLinux:9
 before 8.0.31-1.el9_8
8.0.31-1.el9_8
dotnet-runtime-8.0
AlmaLinux:9
 before 8.0.31-1.el9_8
8.0.31-1.el9_8
dotnet-runtime-dbg-8.0
AlmaLinux:9
 before 8.0.31-1.el9_8
8.0.31-1.el9_8
dotnet-sdk-8.0
AlmaLinux:9
 before 8.0.131-1.el9_8
8.0.131-1.el9_8
dotnet-sdk-8.0-source-built-artifacts
AlmaLinux:9
 before 8.0.131-1.el9_8
8.0.131-1.el9_8
dotnet-sdk-dbg-8.0
AlmaLinux:9
 before 8.0.131-1.el9_8
8.0.131-1.el9_8
dotnet-targeting-pack-8.0
AlmaLinux:9
 before 8.0.31-1.el9_8
8.0.31-1.el9_8
dotnet-templates-8.0
AlmaLinux:9
 before 8.0.131-1.el9_8
8.0.131-1.el9_8
aspnetcore-runtime-8.0
AlmaLinux:10
 before 8.0.31-1.el10_2
8.0.31-1.el10_2
aspnetcore-runtime-dbg-8.0
AlmaLinux:10
 before 8.0.31-1.el10_2
8.0.31-1.el10_2
aspnetcore-targeting-pack-8.0
AlmaLinux:10
 before 8.0.31-1.el10_2
8.0.31-1.el10_2
dotnet-apphost-pack-8.0
AlmaLinux:10
 before 8.0.31-1.el10_2
8.0.31-1.el10_2
dotnet-hostfxr-8.0
AlmaLinux:10
 before 8.0.31-1.el10_2
8.0.31-1.el10_2
dotnet-runtime-8.0
AlmaLinux:10
 before 8.0.31-1.el10_2
8.0.31-1.el10_2
dotnet-runtime-dbg-8.0
AlmaLinux:10
 before 8.0.31-1.el10_2
8.0.31-1.el10_2
dotnet-sdk-8.0
AlmaLinux:10
 before 8.0.131-1.el10_2
8.0.131-1.el10_2
dotnet-sdk-8.0-source-built-artifacts
AlmaLinux:10
 before 8.0.131-1.el10_2
8.0.131-1.el10_2
dotnet-sdk-dbg-8.0
AlmaLinux:10
 before 8.0.131-1.el10_2
8.0.131-1.el10_2
dotnet-targeting-pack-8.0
AlmaLinux:10
 before 8.0.31-1.el10_2
8.0.31-1.el10_2
dotnet-templates-8.0
AlmaLinux:10
 before 8.0.131-1.el10_2
8.0.131-1.el10_2
aspnetcore-runtime-9.0
AlmaLinux:10
From an advisory covering 2 CVEs
 before 9.0.20-1.el10_2
9.0.20-1.el10_2
aspnetcore-runtime-dbg-9.0
AlmaLinux:10
From an advisory covering 2 CVEs
 before 9.0.20-1.el10_2
9.0.20-1.el10_2
aspnetcore-targeting-pack-9.0
AlmaLinux:10
From an advisory covering 2 CVEs
 before 9.0.20-1.el10_2
9.0.20-1.el10_2
dotnet-apphost-pack-9.0
AlmaLinux:10
From an advisory covering 2 CVEs
 before 9.0.20-1.el10_2
9.0.20-1.el10_2
dotnet-hostfxr-9.0
AlmaLinux:10
From an advisory covering 2 CVEs
 before 9.0.20-1.el10_2
9.0.20-1.el10_2
dotnet-runtime-9.0
AlmaLinux:10
From an advisory covering 2 CVEs
 before 9.0.20-1.el10_2
9.0.20-1.el10_2
dotnet-runtime-dbg-9.0
AlmaLinux:10
From an advisory covering 2 CVEs
 before 9.0.20-1.el10_2
9.0.20-1.el10_2
dotnet-sdk-9.0
AlmaLinux:10
From an advisory covering 2 CVEs
 before 9.0.121-1.el10_2
9.0.121-1.el10_2
dotnet-sdk-9.0-source-built-artifacts
AlmaLinux:10
From an advisory covering 2 CVEs
 before 9.0.121-1.el10_2
9.0.121-1.el10_2
dotnet-sdk-aot-9.0
AlmaLinux:10
From an advisory covering 2 CVEs
 before 9.0.121-1.el10_2
9.0.121-1.el10_2
dotnet-sdk-dbg-9.0
AlmaLinux:10
From an advisory covering 2 CVEs
 before 9.0.121-1.el10_2
9.0.121-1.el10_2
dotnet-targeting-pack-9.0
AlmaLinux:10
From an advisory covering 2 CVEs
 before 9.0.20-1.el10_2
9.0.20-1.el10_2
dotnet-templates-9.0
AlmaLinux:10
From an advisory covering 2 CVEs
 before 9.0.121-1.el10_2
9.0.121-1.el10_2
netstandard-targeting-pack-2.1
AlmaLinux:10
From an advisory covering 2 CVEs
 before 9.0.121-1.el10_2
9.0.121-1.el10_2
aspnetcore-runtime-10.0
AlmaLinux:10
From an advisory covering 2 CVEs
 before 10.0.12-1.el10_2
10.0.12-1.el10_2
aspnetcore-runtime-dbg-10.0
AlmaLinux:10
From an advisory covering 2 CVEs
 before 10.0.12-1.el10_2
10.0.12-1.el10_2
aspnetcore-targeting-pack-10.0
AlmaLinux:10
From an advisory covering 2 CVEs
 before 10.0.12-1.el10_2
10.0.12-1.el10_2
dotnet-apphost-pack-10.0
AlmaLinux:10
From an advisory covering 2 CVEs
 before 10.0.12-1.el10_2
10.0.12-1.el10_2
dotnet-host
AlmaLinux:10
From an advisory covering 2 CVEs
 before 10.0.12-1.el10_2
10.0.12-1.el10_2
dotnet-hostfxr-10.0
AlmaLinux:10
From an advisory covering 2 CVEs
 before 10.0.12-1.el10_2
10.0.12-1.el10_2
dotnet-runtime-10.0
AlmaLinux:10
From an advisory covering 2 CVEs
 before 10.0.12-1.el10_2
10.0.12-1.el10_2
dotnet-runtime-dbg-10.0
AlmaLinux:10
From an advisory covering 2 CVEs
 before 10.0.12-1.el10_2
10.0.12-1.el10_2
dotnet-sdk-10.0
AlmaLinux:10
From an advisory covering 2 CVEs
 before 10.0.112-1.el10_2
10.0.112-1.el10_2
dotnet-sdk-10.0-source-built-artifacts
AlmaLinux:10
From an advisory covering 2 CVEs
 before 10.0.112-1.el10_2
10.0.112-1.el10_2
dotnet-sdk-aot-10.0
AlmaLinux:10
From an advisory covering 2 CVEs
 before 10.0.112-1.el10_2
10.0.112-1.el10_2
dotnet-sdk-dbg-10.0
AlmaLinux:10
From an advisory covering 2 CVEs
 before 10.0.112-1.el10_2
10.0.112-1.el10_2
dotnet-targeting-pack-10.0
AlmaLinux:10
From an advisory covering 2 CVEs
 before 10.0.12-1.el10_2
10.0.12-1.el10_2
dotnet-templates-10.0
AlmaLinux:10
From an advisory covering 2 CVEs
 before 10.0.112-1.el10_2
10.0.112-1.el10_2
aspnetcore-runtime-10.0
AlmaLinux:9
From an advisory covering 2 CVEs
 before 10.0.12-1.el9_8
10.0.12-1.el9_8
aspnetcore-runtime-dbg-10.0
AlmaLinux:9
From an advisory covering 2 CVEs
 before 10.0.12-1.el9_8
10.0.12-1.el9_8
aspnetcore-targeting-pack-10.0
AlmaLinux:9
From an advisory covering 2 CVEs
 before 10.0.12-1.el9_8
10.0.12-1.el9_8
dotnet-apphost-pack-10.0
AlmaLinux:9
From an advisory covering 2 CVEs
 before 10.0.12-1.el9_8
10.0.12-1.el9_8
dotnet-host
AlmaLinux:9
From an advisory covering 2 CVEs
 before 10.0.12-1.el9_8
10.0.12-1.el9_8
dotnet-hostfxr-10.0
AlmaLinux:9
From an advisory covering 2 CVEs
 before 10.0.12-1.el9_8
10.0.12-1.el9_8
dotnet-runtime-10.0
AlmaLinux:9
From an advisory covering 2 CVEs
 before 10.0.12-1.el9_8
10.0.12-1.el9_8
dotnet-runtime-dbg-10.0
AlmaLinux:9
From an advisory covering 2 CVEs
 before 10.0.12-1.el9_8
10.0.12-1.el9_8
dotnet-sdk-10.0
AlmaLinux:9
From an advisory covering 2 CVEs
 before 10.0.112-1.el9_8
10.0.112-1.el9_8
dotnet-sdk-10.0-source-built-artifacts
AlmaLinux:9
From an advisory covering 2 CVEs
 before 10.0.112-1.el9_8
10.0.112-1.el9_8
dotnet-sdk-aot-10.0
AlmaLinux:9
From an advisory covering 2 CVEs
 before 10.0.112-1.el9_8
10.0.112-1.el9_8
dotnet-sdk-dbg-10.0
AlmaLinux:9
From an advisory covering 2 CVEs
 before 10.0.112-1.el9_8
10.0.112-1.el9_8
dotnet-targeting-pack-10.0
AlmaLinux:9
From an advisory covering 2 CVEs
 before 10.0.12-1.el9_8
10.0.12-1.el9_8
dotnet-templates-10.0
AlmaLinux:9
From an advisory covering 2 CVEs
 before 10.0.112-1.el9_8
10.0.112-1.el9_8
aspnetcore-runtime-9.0
AlmaLinux:9
From an advisory covering 2 CVEs
 before 9.0.20-1.el9_8
9.0.20-1.el9_8
aspnetcore-runtime-dbg-9.0
AlmaLinux:9
From an advisory covering 2 CVEs
 before 9.0.20-1.el9_8
9.0.20-1.el9_8
aspnetcore-targeting-pack-9.0
AlmaLinux:9
From an advisory covering 2 CVEs
 before 9.0.20-1.el9_8
9.0.20-1.el9_8
dotnet-apphost-pack-9.0
AlmaLinux:9
From an advisory covering 2 CVEs
 before 9.0.20-1.el9_8
9.0.20-1.el9_8
dotnet-hostfxr-9.0
AlmaLinux:9
From an advisory covering 2 CVEs
 before 9.0.20-1.el9_8
9.0.20-1.el9_8
dotnet-runtime-9.0
AlmaLinux:9
From an advisory covering 2 CVEs
 before 9.0.20-1.el9_8
9.0.20-1.el9_8
dotnet-runtime-dbg-9.0
AlmaLinux:9
From an advisory covering 2 CVEs
 before 9.0.20-1.el9_8
9.0.20-1.el9_8
dotnet-sdk-9.0
AlmaLinux:9
From an advisory covering 2 CVEs
 before 9.0.121-1.el9_8
9.0.121-1.el9_8
dotnet-sdk-9.0-source-built-artifacts
AlmaLinux:9
From an advisory covering 2 CVEs
 before 9.0.121-1.el9_8
9.0.121-1.el9_8
dotnet-sdk-aot-9.0
AlmaLinux:9
From an advisory covering 2 CVEs
 before 9.0.121-1.el9_8
9.0.121-1.el9_8
dotnet-sdk-dbg-9.0
AlmaLinux:9
From an advisory covering 2 CVEs
 before 9.0.121-1.el9_8
9.0.121-1.el9_8
dotnet-targeting-pack-9.0
AlmaLinux:9
From an advisory covering 2 CVEs
 before 9.0.20-1.el9_8
9.0.20-1.el9_8
dotnet-templates-9.0
AlmaLinux:9
From an advisory covering 2 CVEs
 before 9.0.121-1.el9_8
9.0.121-1.el9_8
netstandard-targeting-pack-2.1
AlmaLinux:9
From an advisory covering 2 CVEs
 before 9.0.121-1.el9_8
9.0.121-1.el9_8
aspnetcore-runtime-9.0
AlmaLinux:8
From an advisory covering 2 CVEs
 before 9.0.20-1.el8_10
9.0.20-1.el8_10
aspnetcore-runtime-dbg-9.0
AlmaLinux:8
From an advisory covering 2 CVEs
 before 9.0.20-1.el8_10
9.0.20-1.el8_10
aspnetcore-targeting-pack-9.0
AlmaLinux:8
From an advisory covering 2 CVEs
 before 9.0.20-1.el8_10
9.0.20-1.el8_10
dotnet-apphost-pack-9.0
AlmaLinux:8
From an advisory covering 2 CVEs
 before 9.0.20-1.el8_10
9.0.20-1.el8_10
dotnet-hostfxr-9.0
AlmaLinux:8
From an advisory covering 2 CVEs
 before 9.0.20-1.el8_10
9.0.20-1.el8_10
dotnet-runtime-9.0
AlmaLinux:8
From an advisory covering 2 CVEs
 before 9.0.20-1.el8_10
9.0.20-1.el8_10
dotnet-runtime-dbg-9.0
AlmaLinux:8
From an advisory covering 2 CVEs
 before 9.0.20-1.el8_10
9.0.20-1.el8_10
dotnet-sdk-9.0
AlmaLinux:8
From an advisory covering 2 CVEs
 before 9.0.121-1.el8_10
9.0.121-1.el8_10
dotnet-sdk-9.0-source-built-artifacts
AlmaLinux:8
From an advisory covering 2 CVEs
 before 9.0.121-1.el8_10
9.0.121-1.el8_10
dotnet-sdk-aot-9.0
AlmaLinux:8
From an advisory covering 2 CVEs
 before 9.0.121-1.el8_10
9.0.121-1.el8_10
dotnet-sdk-dbg-9.0
AlmaLinux:8
From an advisory covering 2 CVEs
 before 9.0.121-1.el8_10
9.0.121-1.el8_10
dotnet-targeting-pack-9.0
AlmaLinux:8
From an advisory covering 2 CVEs
 before 9.0.20-1.el8_10
9.0.20-1.el8_10
dotnet-templates-9.0
AlmaLinux:8
From an advisory covering 2 CVEs
 before 9.0.121-1.el8_10
9.0.121-1.el8_10
netstandard-targeting-pack-2.1
AlmaLinux:8
From an advisory covering 2 CVEs
 before 9.0.121-1.el8_10
9.0.121-1.el8_10
aspnetcore-runtime-8.0
AlmaLinux:8
 before 8.0.31-1.el8_10
8.0.31-1.el8_10
aspnetcore-runtime-dbg-8.0
AlmaLinux:8
 before 8.0.31-1.el8_10
8.0.31-1.el8_10
aspnetcore-targeting-pack-8.0
AlmaLinux:8
 before 8.0.31-1.el8_10
8.0.31-1.el8_10
dotnet-apphost-pack-8.0
AlmaLinux:8
 before 8.0.31-1.el8_10
8.0.31-1.el8_10
dotnet-hostfxr-8.0
AlmaLinux:8
 before 8.0.31-1.el8_10
8.0.31-1.el8_10
dotnet-runtime-8.0
AlmaLinux:8
 before 8.0.31-1.el8_10
8.0.31-1.el8_10
dotnet-runtime-dbg-8.0
AlmaLinux:8
 before 8.0.31-1.el8_10
8.0.31-1.el8_10
dotnet-sdk-8.0
AlmaLinux:8
 before 8.0.131-1.el8_10
8.0.131-1.el8_10
dotnet-sdk-8.0-source-built-artifacts
AlmaLinux:8
 before 8.0.131-1.el8_10
8.0.131-1.el8_10
dotnet-sdk-dbg-8.0
AlmaLinux:8
 before 8.0.131-1.el8_10
8.0.131-1.el8_10
dotnet-targeting-pack-8.0
AlmaLinux:8
 before 8.0.31-1.el8_10
8.0.31-1.el8_10
dotnet-templates-8.0
AlmaLinux:8
 before 8.0.131-1.el8_10
8.0.131-1.el8_10
aspnetcore-runtime-10.0
AlmaLinux:8
From an advisory covering 2 CVEs
 before 10.0.12-1.el8_10
10.0.12-1.el8_10
aspnetcore-runtime-dbg-10.0
AlmaLinux:8
From an advisory covering 2 CVEs
 before 10.0.12-1.el8_10
10.0.12-1.el8_10
aspnetcore-targeting-pack-10.0
AlmaLinux:8
From an advisory covering 2 CVEs
 before 10.0.12-1.el8_10
10.0.12-1.el8_10
dotnet
AlmaLinux:8
From an advisory covering 2 CVEs
 before 10.0.112-1.el8_10
10.0.112-1.el8_10
dotnet-apphost-pack-10.0
AlmaLinux:8
From an advisory covering 2 CVEs
 before 10.0.12-1.el8_10
10.0.12-1.el8_10
dotnet-host
AlmaLinux:8
From an advisory covering 2 CVEs
 before 10.0.12-1.el8_10
10.0.12-1.el8_10
dotnet-hostfxr-10.0
AlmaLinux:8
From an advisory covering 2 CVEs
 before 10.0.12-1.el8_10
10.0.12-1.el8_10
dotnet-runtime-10.0
AlmaLinux:8
From an advisory covering 2 CVEs
 before 10.0.12-1.el8_10
10.0.12-1.el8_10
dotnet-runtime-dbg-10.0
AlmaLinux:8
From an advisory covering 2 CVEs
 before 10.0.12-1.el8_10
10.0.12-1.el8_10
dotnet-sdk-10.0
AlmaLinux:8
From an advisory covering 2 CVEs
 before 10.0.112-1.el8_10
10.0.112-1.el8_10
dotnet-sdk-10.0-source-built-artifacts
AlmaLinux:8
From an advisory covering 2 CVEs
 before 10.0.112-1.el8_10
10.0.112-1.el8_10
dotnet-sdk-aot-10.0
AlmaLinux:8
From an advisory covering 2 CVEs
 before 10.0.112-1.el8_10
10.0.112-1.el8_10
dotnet-sdk-dbg-10.0
AlmaLinux:8
From an advisory covering 2 CVEs
 before 10.0.112-1.el8_10
10.0.112-1.el8_10
dotnet-targeting-pack-10.0
AlmaLinux:8
From an advisory covering 2 CVEs
 before 10.0.12-1.el8_10
10.0.12-1.el8_10
dotnet-templates-10.0
AlmaLinux:8
From an advisory covering 2 CVEs
 before 10.0.112-1.el8_10
10.0.112-1.el8_10
dotnet8-runtime
Alpaquita:25
 8.0.17-r0 up to 8.0.31-r0
8.0.31-r0
dotnet8-runtime
Alpaquita:stream
 8.0.11-r1 up to 8.0.31-r0
8.0.31-r0
dotnet-sdk-10.0
Red Hat:hummingbird:1
From an advisory covering 3 CVEs
 before 0:10.0.112-1.hum1
0:10.0.112-1.hum1
dotnet-sdk-10.0-source-built-artifacts
Red Hat:hummingbird:1
From an advisory covering 3 CVEs
 before 0:10.0.112-1.hum1
0:10.0.112-1.hum1
dotnet-sdk-aot-10.0
Red Hat:hummingbird:1
From an advisory covering 3 CVEs
 before 0:10.0.112-1.hum1
0:10.0.112-1.hum1
dotnet-sdk-dbg-10.0
Red Hat:hummingbird:1
From an advisory covering 3 CVEs
 before 0:10.0.112-1.hum1
0:10.0.112-1.hum1
dotnet-templates-10.0
Red Hat:hummingbird:1
From an advisory covering 3 CVEs
 before 0:10.0.112-1.hum1
0:10.0.112-1.hum1
dotnet10.0
Red Hat:hummingbird:1
From an advisory covering 3 CVEs
 before 0:10.0.112-1.hum1
0:10.0.112-1.hum1
aspnetcore-runtime-8.0
Red Hat:enterprise_linux:9::appstream
 before 0:8.0.31-1.el9_8
0:8.0.31-1.el9_8
aspnetcore-runtime-dbg-8.0
Red Hat:enterprise_linux:9::appstream
 before 0:8.0.31-1.el9_8
0:8.0.31-1.el9_8
aspnetcore-targeting-pack-8.0
Red Hat:enterprise_linux:9::appstream
 before 0:8.0.31-1.el9_8
0:8.0.31-1.el9_8
dotnet-apphost-pack-8.0
Red Hat:enterprise_linux:9::appstream
 before 0:8.0.31-1.el9_8
0:8.0.31-1.el9_8
dotnet-apphost-pack-8.0-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:8.0.31-1.el9_8
0:8.0.31-1.el9_8
dotnet-hostfxr-8.0
Red Hat:enterprise_linux:9::appstream
 before 0:8.0.31-1.el9_8
0:8.0.31-1.el9_8
dotnet-hostfxr-8.0-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:8.0.31-1.el9_8
0:8.0.31-1.el9_8
dotnet-runtime-8.0
Red Hat:enterprise_linux:9::appstream
 before 0:8.0.31-1.el9_8
0:8.0.31-1.el9_8
dotnet-runtime-8.0-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:8.0.31-1.el9_8
0:8.0.31-1.el9_8
dotnet-runtime-dbg-8.0
Red Hat:enterprise_linux:9::appstream
 before 0:8.0.31-1.el9_8
0:8.0.31-1.el9_8
dotnet-sdk-8.0
Red Hat:enterprise_linux:9::appstream
 before 0:8.0.131-1.el9_8
0:8.0.131-1.el9_8
dotnet-sdk-8.0-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:8.0.131-1.el9_8
0:8.0.131-1.el9_8
dotnet-sdk-dbg-8.0
Red Hat:enterprise_linux:9::appstream
 before 0:8.0.131-1.el9_8
0:8.0.131-1.el9_8
dotnet-targeting-pack-8.0
Red Hat:enterprise_linux:9::appstream
 before 0:8.0.31-1.el9_8
0:8.0.31-1.el9_8
dotnet-templates-8.0
Red Hat:enterprise_linux:9::appstream
 before 0:8.0.131-1.el9_8
0:8.0.131-1.el9_8
dotnet8.0
Red Hat:enterprise_linux:9::appstream
 before 0:8.0.131-1.el9_8
0:8.0.131-1.el9_8
dotnet8.0-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:8.0.131-1.el9_8
0:8.0.131-1.el9_8
dotnet8.0-debugsource
Red Hat:enterprise_linux:9::appstream
 before 0:8.0.131-1.el9_8
0:8.0.131-1.el9_8
dotnet-apphost-pack-8.0-debuginfo
Red Hat:enterprise_linux:9::crb
 before 0:8.0.31-1.el9_8
0:8.0.31-1.el9_8
dotnet-hostfxr-8.0-debuginfo
Red Hat:enterprise_linux:9::crb
 before 0:8.0.31-1.el9_8
0:8.0.31-1.el9_8
dotnet-runtime-8.0-debuginfo
Red Hat:enterprise_linux:9::crb
 before 0:8.0.31-1.el9_8
0:8.0.31-1.el9_8
dotnet-sdk-8.0-debuginfo
Red Hat:enterprise_linux:9::crb
 before 0:8.0.131-1.el9_8
0:8.0.131-1.el9_8
dotnet-sdk-8.0-source-built-artifacts
Red Hat:enterprise_linux:9::crb
 before 0:8.0.131-1.el9_8
0:8.0.131-1.el9_8
dotnet8.0-debuginfo
Red Hat:enterprise_linux:9::crb
 before 0:8.0.131-1.el9_8
0:8.0.131-1.el9_8
dotnet8.0-debugsource
Red Hat:enterprise_linux:9::crb
 before 0:8.0.131-1.el9_8
0:8.0.131-1.el9_8
aspnetcore-runtime-8.0
Red Hat:enterprise_linux:10.2
 before 0:8.0.31-1.el10_2
0:8.0.31-1.el10_2
aspnetcore-runtime-dbg-8.0
Red Hat:enterprise_linux:10.2
 before 0:8.0.31-1.el10_2
0:8.0.31-1.el10_2
aspnetcore-targeting-pack-8.0
Red Hat:enterprise_linux:10.2
 before 0:8.0.31-1.el10_2
0:8.0.31-1.el10_2
dotnet-apphost-pack-8.0
Red Hat:enterprise_linux:10.2
 before 0:8.0.31-1.el10_2
0:8.0.31-1.el10_2
dotnet-apphost-pack-8.0-debuginfo
Red Hat:enterprise_linux:10.2
 before 0:8.0.31-1.el10_2
0:8.0.31-1.el10_2
dotnet-hostfxr-8.0
Red Hat:enterprise_linux:10.2
 before 0:8.0.31-1.el10_2
0:8.0.31-1.el10_2
dotnet-hostfxr-8.0-debuginfo
Red Hat:enterprise_linux:10.2
 before 0:8.0.31-1.el10_2
0:8.0.31-1.el10_2
dotnet-runtime-8.0
Red Hat:enterprise_linux:10.2
 before 0:8.0.31-1.el10_2
0:8.0.31-1.el10_2
dotnet-runtime-8.0-debuginfo
Red Hat:enterprise_linux:10.2
 before 0:8.0.31-1.el10_2
0:8.0.31-1.el10_2
dotnet-runtime-dbg-8.0
Red Hat:enterprise_linux:10.2
 before 0:8.0.31-1.el10_2
0:8.0.31-1.el10_2
dotnet-sdk-8.0
Red Hat:enterprise_linux:10.2
 before 0:8.0.131-1.el10_2
0:8.0.131-1.el10_2
dotnet-sdk-8.0-debuginfo
Red Hat:enterprise_linux:10.2
 before 0:8.0.131-1.el10_2
0:8.0.131-1.el10_2
dotnet-sdk-dbg-8.0
Red Hat:enterprise_linux:10.2
 before 0:8.0.131-1.el10_2
0:8.0.131-1.el10_2
dotnet-targeting-pack-8.0
Red Hat:enterprise_linux:10.2
 before 0:8.0.31-1.el10_2
0:8.0.31-1.el10_2
dotnet-templates-8.0
Red Hat:enterprise_linux:10.2
 before 0:8.0.131-1.el10_2
0:8.0.131-1.el10_2
dotnet8.0
Red Hat:enterprise_linux:10.2
 before 0:8.0.131-1.el10_2
0:8.0.131-1.el10_2
dotnet8.0-debugsource
Red Hat:enterprise_linux:10.2
 before 0:8.0.131-1.el10_2
0:8.0.131-1.el10_2
dotnet-sdk-8.0-source-built-artifacts
Red Hat:enterprise_linux:10.2
 before 0:8.0.131-1.el10_2
0:8.0.131-1.el10_2
aspnetcore-runtime-9.0
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:9.0.20-1.el10_2
0:9.0.20-1.el10_2
aspnetcore-runtime-dbg-9.0
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:9.0.20-1.el10_2
0:9.0.20-1.el10_2
aspnetcore-targeting-pack-9.0
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:9.0.20-1.el10_2
0:9.0.20-1.el10_2
dotnet-apphost-pack-9.0
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:9.0.20-1.el10_2
0:9.0.20-1.el10_2
dotnet-apphost-pack-9.0-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:9.0.20-1.el10_2
0:9.0.20-1.el10_2
dotnet-hostfxr-9.0
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:9.0.20-1.el10_2
0:9.0.20-1.el10_2
dotnet-hostfxr-9.0-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:9.0.20-1.el10_2
0:9.0.20-1.el10_2
dotnet-runtime-9.0
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:9.0.20-1.el10_2
0:9.0.20-1.el10_2
dotnet-runtime-9.0-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:9.0.20-1.el10_2
0:9.0.20-1.el10_2
dotnet-runtime-dbg-9.0
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:9.0.20-1.el10_2
0:9.0.20-1.el10_2
dotnet-sdk-9.0
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:9.0.121-1.el10_2
0:9.0.121-1.el10_2
dotnet-sdk-9.0-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:9.0.121-1.el10_2
0:9.0.121-1.el10_2
dotnet-sdk-aot-9.0
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:9.0.121-1.el10_2
0:9.0.121-1.el10_2
dotnet-sdk-aot-9.0-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:9.0.121-1.el10_2
0:9.0.121-1.el10_2
dotnet-sdk-dbg-9.0
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:9.0.121-1.el10_2
0:9.0.121-1.el10_2
dotnet-targeting-pack-9.0
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:9.0.20-1.el10_2
0:9.0.20-1.el10_2
dotnet-templates-9.0
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:9.0.121-1.el10_2
0:9.0.121-1.el10_2
dotnet9.0
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:9.0.121-1.el10_2
0:9.0.121-1.el10_2
dotnet9.0-debugsource
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:9.0.121-1.el10_2
0:9.0.121-1.el10_2
netstandard-targeting-pack-2.1
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:9.0.121-1.el10_2
0:9.0.121-1.el10_2
dotnet-sdk-9.0-source-built-artifacts
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:9.0.121-1.el10_2
0:9.0.121-1.el10_2
aspnetcore-runtime-10.0
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:10.0.12-1.el10_2
0:10.0.12-1.el10_2
aspnetcore-runtime-dbg-10.0
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:10.0.12-1.el10_2
0:10.0.12-1.el10_2
aspnetcore-targeting-pack-10.0
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:10.0.12-1.el10_2
0:10.0.12-1.el10_2
dotnet-apphost-pack-10.0
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:10.0.12-1.el10_2
0:10.0.12-1.el10_2
dotnet-apphost-pack-10.0-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:10.0.12-1.el10_2
0:10.0.12-1.el10_2
dotnet-host
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:10.0.12-1.el10_2
0:10.0.12-1.el10_2
dotnet-host-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:10.0.12-1.el10_2
0:10.0.12-1.el10_2
dotnet-hostfxr-10.0
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:10.0.12-1.el10_2
0:10.0.12-1.el10_2
dotnet-hostfxr-10.0-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:10.0.12-1.el10_2
0:10.0.12-1.el10_2
dotnet-runtime-10.0
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:10.0.12-1.el10_2
0:10.0.12-1.el10_2
dotnet-runtime-10.0-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:10.0.12-1.el10_2
0:10.0.12-1.el10_2
dotnet-runtime-dbg-10.0
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:10.0.12-1.el10_2
0:10.0.12-1.el10_2
dotnet-sdk-10.0
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:10.0.112-1.el10_2
0:10.0.112-1.el10_2
dotnet-sdk-10.0-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:10.0.112-1.el10_2
0:10.0.112-1.el10_2
dotnet-sdk-aot-10.0
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:10.0.112-1.el10_2
0:10.0.112-1.el10_2
dotnet-sdk-aot-10.0-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:10.0.112-1.el10_2
0:10.0.112-1.el10_2
dotnet-sdk-dbg-10.0
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:10.0.112-1.el10_2
0:10.0.112-1.el10_2
dotnet-targeting-pack-10.0
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:10.0.12-1.el10_2
0:10.0.12-1.el10_2
dotnet-templates-10.0
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:10.0.112-1.el10_2
0:10.0.112-1.el10_2
dotnet10.0
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:10.0.112-1.el10_2
0:10.0.112-1.el10_2
dotnet10.0-debugsource
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:10.0.112-1.el10_2
0:10.0.112-1.el10_2
dotnet-sdk-10.0-source-built-artifacts
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:10.0.112-1.el10_2
0:10.0.112-1.el10_2
aspnetcore-runtime-10.0
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:10.0.12-1.el9_8
0:10.0.12-1.el9_8
aspnetcore-runtime-dbg-10.0
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:10.0.12-1.el9_8
0:10.0.12-1.el9_8
aspnetcore-targeting-pack-10.0
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:10.0.12-1.el9_8
0:10.0.12-1.el9_8
dotnet-apphost-pack-10.0
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:10.0.12-1.el9_8
0:10.0.12-1.el9_8
dotnet-apphost-pack-10.0-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:10.0.12-1.el9_8
0:10.0.12-1.el9_8
dotnet-host
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:10.0.12-1.el9_8
0:10.0.12-1.el9_8
dotnet-host-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:10.0.12-1.el9_8
0:10.0.12-1.el9_8
dotnet-hostfxr-10.0
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:10.0.12-1.el9_8
0:10.0.12-1.el9_8
dotnet-hostfxr-10.0-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:10.0.12-1.el9_8
0:10.0.12-1.el9_8
dotnet-runtime-10.0
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:10.0.12-1.el9_8
0:10.0.12-1.el9_8
dotnet-runtime-10.0-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:10.0.12-1.el9_8
0:10.0.12-1.el9_8
dotnet-runtime-dbg-10.0
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:10.0.12-1.el9_8
0:10.0.12-1.el9_8
dotnet-sdk-10.0
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:10.0.112-1.el9_8
0:10.0.112-1.el9_8
dotnet-sdk-10.0-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:10.0.112-1.el9_8
0:10.0.112-1.el9_8
dotnet-sdk-aot-10.0
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:10.0.112-1.el9_8
0:10.0.112-1.el9_8
dotnet-sdk-aot-10.0-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:10.0.112-1.el9_8
0:10.0.112-1.el9_8
dotnet-sdk-dbg-10.0
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:10.0.112-1.el9_8
0:10.0.112-1.el9_8
dotnet-targeting-pack-10.0
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:10.0.12-1.el9_8
0:10.0.12-1.el9_8
dotnet-templates-10.0
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:10.0.112-1.el9_8
0:10.0.112-1.el9_8
dotnet10.0
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:10.0.112-1.el9_8
0:10.0.112-1.el9_8
dotnet10.0-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:10.0.112-1.el9_8
0:10.0.112-1.el9_8
dotnet10.0-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:10.0.112-1.el9_8
0:10.0.112-1.el9_8
dotnet-apphost-pack-10.0-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 2 CVEs
 before 0:10.0.12-1.el9_8
0:10.0.12-1.el9_8
dotnet-host-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 2 CVEs
 before 0:10.0.12-1.el9_8
0:10.0.12-1.el9_8
dotnet-hostfxr-10.0-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 2 CVEs
 before 0:10.0.12-1.el9_8
0:10.0.12-1.el9_8
dotnet-runtime-10.0-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 2 CVEs
 before 0:10.0.12-1.el9_8
0:10.0.12-1.el9_8
dotnet-sdk-10.0-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 2 CVEs
 before 0:10.0.112-1.el9_8
0:10.0.112-1.el9_8
dotnet-sdk-10.0-source-built-artifacts
Red Hat:enterprise_linux:9::crb
From an advisory covering 2 CVEs
 before 0:10.0.112-1.el9_8
0:10.0.112-1.el9_8
dotnet-sdk-aot-10.0-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 2 CVEs
 before 0:10.0.112-1.el9_8
0:10.0.112-1.el9_8
dotnet10.0-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 2 CVEs
 before 0:10.0.112-1.el9_8
0:10.0.112-1.el9_8
dotnet10.0-debugsource
Red Hat:enterprise_linux:9::crb
From an advisory covering 2 CVEs
 before 0:10.0.112-1.el9_8
0:10.0.112-1.el9_8
aspnetcore-runtime-9.0
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:9.0.20-1.el9_8
0:9.0.20-1.el9_8
aspnetcore-runtime-dbg-9.0
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:9.0.20-1.el9_8
0:9.0.20-1.el9_8
aspnetcore-targeting-pack-9.0
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:9.0.20-1.el9_8
0:9.0.20-1.el9_8
dotnet-apphost-pack-9.0
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:9.0.20-1.el9_8
0:9.0.20-1.el9_8
dotnet-apphost-pack-9.0-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:9.0.20-1.el9_8
0:9.0.20-1.el9_8
dotnet-hostfxr-9.0
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:9.0.20-1.el9_8
0:9.0.20-1.el9_8
dotnet-hostfxr-9.0-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:9.0.20-1.el9_8
0:9.0.20-1.el9_8
dotnet-runtime-9.0
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:9.0.20-1.el9_8
0:9.0.20-1.el9_8
dotnet-runtime-9.0-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:9.0.20-1.el9_8
0:9.0.20-1.el9_8
dotnet-runtime-dbg-9.0
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:9.0.20-1.el9_8
0:9.0.20-1.el9_8
dotnet-sdk-9.0
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:9.0.121-1.el9_8
0:9.0.121-1.el9_8
dotnet-sdk-9.0-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:9.0.121-1.el9_8
0:9.0.121-1.el9_8
dotnet-sdk-aot-9.0
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:9.0.121-1.el9_8
0:9.0.121-1.el9_8
dotnet-sdk-aot-9.0-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:9.0.121-1.el9_8
0:9.0.121-1.el9_8
dotnet-sdk-dbg-9.0
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:9.0.121-1.el9_8
0:9.0.121-1.el9_8
dotnet-targeting-pack-9.0
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:9.0.20-1.el9_8
0:9.0.20-1.el9_8
dotnet-templates-9.0
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:9.0.121-1.el9_8
0:9.0.121-1.el9_8
dotnet9.0
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:9.0.121-1.el9_8
0:9.0.121-1.el9_8
dotnet9.0-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:9.0.121-1.el9_8
0:9.0.121-1.el9_8
dotnet9.0-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:9.0.121-1.el9_8
0:9.0.121-1.el9_8
netstandard-targeting-pack-2.1
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:9.0.121-1.el9_8
0:9.0.121-1.el9_8
dotnet-apphost-pack-9.0-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 2 CVEs
 before 0:9.0.20-1.el9_8
0:9.0.20-1.el9_8
dotnet-hostfxr-9.0-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 2 CVEs
 before 0:9.0.20-1.el9_8
0:9.0.20-1.el9_8
dotnet-runtime-9.0-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 2 CVEs
 before 0:9.0.20-1.el9_8
0:9.0.20-1.el9_8
dotnet-sdk-9.0-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 2 CVEs
 before 0:9.0.121-1.el9_8
0:9.0.121-1.el9_8
dotnet-sdk-9.0-source-built-artifacts
Red Hat:enterprise_linux:9::crb
From an advisory covering 2 CVEs
 before 0:9.0.121-1.el9_8
0:9.0.121-1.el9_8
dotnet-sdk-aot-9.0-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 2 CVEs
 before 0:9.0.121-1.el9_8
0:9.0.121-1.el9_8
dotnet8.0
Rocky Linux:9
 before 0:8.0.131-1.el9_8
0:8.0.131-1.el9_8
dotnet8.0
Rocky Linux:10
 before 0:8.0.131-1.el10_2
0:8.0.131-1.el10_2
dotnet9.0
Rocky Linux:10
From an advisory covering 2 CVEs
 before 0:9.0.121-1.el10_2
0:9.0.121-1.el10_2
dotnet10.0
Rocky Linux:10
From an advisory covering 2 CVEs
 before 0:10.0.112-1.el10_2
0:10.0.112-1.el10_2
dotnet10.0
Rocky Linux:9
From an advisory covering 2 CVEs
 before 0:10.0.112-1.el9_8
0:10.0.112-1.el9_8
dotnet9.0
Rocky Linux:9
From an advisory covering 2 CVEs
 before 0:9.0.121-1.el9_8
0:9.0.121-1.el9_8
dotnet9.0
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:9.0.121-1.el8_10
0:9.0.121-1.el8_10
dotnet8.0
Rocky Linux:8
 before 0:8.0.131-1.el8_10
0:8.0.131-1.el8_10
dotnet10.0
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:10.0.112-1.el8_10
0:10.0.112-1.el8_10
dotnet6
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.0.108-0ubuntu1~22.04.16.0.109-0ubuntu1~22.04.16.0.110-0ubuntu1~22.04.16.0.111-0ubuntu1~22.04.16.0.113-0ubuntu1~22.04.1
Show 16 moreShow less
6.0.116-0ubuntu1~22.04.16.0.118-0ubuntu1~22.04.16.0.119-0ubuntu1~22.04.16.0.120-0ubuntu1~22.04.16.0.121-0ubuntu1~22.04.16.0.122-0ubuntu1~22.04.16.0.123-0ubuntu1~22.04.16.0.124-0ubuntu1~22.04.16.0.125-0ubuntu1~22.04.16.0.126-0ubuntu1~22.04.16.0.127-0ubuntu1~22.04.16.0.128-0ubuntu1~22.04.26.0.132-0ubuntu1~22.04.16.0.133-0ubuntu1~22.04.16.0.135-0ubuntu1~22.04.16.0.136-0ubuntu1~22.04.1
 None known
dotnet7
Ubuntu:22.04:LTS
 All versions, plus listed versions
7.0.105-0ubuntu1~22.04.17.0.107-0ubuntu1~22.04.17.0.108-0ubuntu1~22.04.17.0.109-0ubuntu1~22.04.17.0.110-0ubuntu1~22.04.1
Show 9 moreShow less
7.0.111-0ubuntu1~22.04.17.0.112-0ubuntu1~22.04.17.0.113-0ubuntu1~22.04.17.0.114-0ubuntu1~22.04.17.0.115-0ubuntu1~22.04.17.0.116-0ubuntu1~22.04.17.0.117-0ubuntu1~22.04.17.0.117-0ubuntu1~22.04.27.0.119-0ubuntu1~22.04.1
 None known
dotnet8
Ubuntu:22.04:LTS
 before 8.0.131-8.0.31-0ubuntu1~22.04.1, plus listed versions
8.0.102-8.0.2-0ubuntu1~22.04.18.0.103-8.0.3-0ubuntu1~22.04.18.0.103-8.0.3-0ubuntu1~22.04.28.0.105-8.0.5-0ubuntu1~22.04.18.0.107-8.0.7-0ubuntu1~22.04.1
Show 21 moreShow less
8.0.108-8.0.8-0ubuntu1~22.04.18.0.110-8.0.10-0ubuntu1~22.04.18.0.111-8.0.11-0ubuntu1~22.04.18.0.112-8.0.12-0ubuntu1~22.04.18.0.114-8.0.14-0ubuntu1~22.04.18.0.115-8.0.15-0ubuntu1~22.04.18.0.116-8.0.16-0ubuntu1~22.04.18.0.117-8.0.17-0ubuntu1~22.04.18.0.118-8.0.18-0ubuntu1~22.04.18.0.119-8.0.19-0ubuntu1~22.04.18.0.120-8.0.20-0ubuntu1~22.04.18.0.121-8.0.21-0ubuntu1~22.04.18.0.122-8.0.22-0ubuntu1~22.04.18.0.123-8.0.23-0ubuntu1~22.04.18.0.124-8.0.24-0ubuntu1~22.04.18.0.125-8.0.25-0ubuntu1~22.04.18.0.126-8.0.26-0ubuntu1~22.04.18.0.127-8.0.27-0ubuntu1~22.04.18.0.128-8.0.28-0ubuntu1~22.04.18.0.129-8.0.29-0ubuntu1~22.04.18.0.130-8.0.30-0ubuntu1~22.04.1
8.0.131-8.0.31-0ubuntu1~22.04.1
dotnet10
Ubuntu:24.04:LTS
 before 10.0.112-10.0.12-0ubuntu1~24.04.1, plus listed versions
10.0.100-10.0.0-0ubuntu1~24.04.110.0.101-10.0.1-0ubuntu1~24.04.210.0.103-10.0.3-0ubuntu1~24.04.110.0.104-10.0.4-0ubuntu1~24.04.110.0.105-10.0.5-0ubuntu1~24.04.1
Show 6 moreShow less
10.0.106-10.0.6-0ubuntu1~24.04.110.0.107-10.0.7-0ubuntu1~24.04.110.0.108-10.0.8-0ubuntu1~24.04.110.0.109-10.0.9-0ubuntu1~24.04.110.0.110-10.0.10-0ubuntu1~24.04.110.0.111-10.0.11-0ubuntu1~24.04.1
10.0.112-10.0.12-0ubuntu1~24.04.1
dotnet8
Ubuntu:24.04:LTS
 before 8.0.131-8.0.31-0ubuntu1~24.04.1, plus listed versions
8.0.100-8.0.0~rc1-0ubuntu18.0.100-8.0.0~rc2-0ubuntu18.0.100-8.0.0~rc2-0ubuntu28.0.100-8.0.0-0ubuntu18.0.100-8.0.0-0ubuntu2
Show 30 moreShow less
8.0.101-8.0.1-0ubuntu18.0.101-8.0.1-0ubuntu28.0.102-8.0.2-0ubuntu18.0.103-8.0.3-0ubuntu28.0.103-8.0.3-0ubuntu38.0.104-8.0.4-0ubuntu18.0.105-8.0.5-0ubuntu1~24.04.18.0.107-8.0.7-0ubuntu1~24.04.18.0.108-8.0.8-0ubuntu1~24.04.18.0.108-8.0.8-0ubuntu1~24.04.28.0.110-8.0.10-0ubuntu1~24.04.18.0.111-8.0.11-0ubuntu1~24.04.18.0.112-8.0.12-0ubuntu1~24.04.18.0.114-8.0.14-0ubuntu1~24.04.18.0.115-8.0.15-0ubuntu1~24.04.18.0.116-8.0.16-0ubuntu1~24.04.18.0.117-8.0.17-0ubuntu1~24.04.18.0.118-8.0.18-0ubuntu1~24.04.18.0.119-8.0.19-0ubuntu1~24.04.18.0.120-8.0.20-0ubuntu1~24.04.18.0.121-8.0.21-0ubuntu1~24.04.18.0.122-8.0.22-0ubuntu1~24.04.18.0.123-8.0.23-0ubuntu1~24.04.18.0.124-8.0.24-0ubuntu1~24.04.18.0.125-8.0.25-0ubuntu1~24.04.18.0.126-8.0.26-0ubuntu1~24.04.18.0.127-8.0.27-0ubuntu1~24.04.18.0.128-8.0.28-0ubuntu1~24.04.18.0.129-8.0.29-0ubuntu1~24.04.18.0.130-8.0.30-0ubuntu1~24.04.1
8.0.131-8.0.31-0ubuntu1~24.04.1
dotnet10
Ubuntu:26.04:LTS
 before 10.0.112-10.0.12-0ubuntu1~26.04.1, plus listed versions
10.0.100-10.0.0~rc1-0ubuntu110.0.100-10.0.0~rc2-0ubuntu110.0.100-10.0.0-0ubuntu110.0.100-10.0.0-0ubuntu210.0.101-10.0.1-0ubuntu1
Show 11 moreShow less
10.0.101-10.0.1-0ubuntu210.0.101-10.0.1-0ubuntu310.0.102-10.0.2-0ubuntu110.0.103-10.0.3-0ubuntu110.0.104-10.0.4-0ubuntu110.0.105-10.0.5-0ubuntu110.0.107-10.0.7-0ubuntu1~26.04.110.0.108-10.0.8-0ubuntu1~26.04.110.0.109-10.0.9-0ubuntu1~26.04.110.0.110-10.0.10-0ubuntu1~26.04.110.0.111-10.0.11-0ubuntu1~26.04.1
10.0.112-10.0.12-0ubuntu1~26.04.1
dotnet8
Ubuntu:22.04:LTS
From an advisory covering 2 CVEs
 before 8.0.131-8.0.31-0ubuntu1~22.04.1, plus listed versions
8.0.102-8.0.2-0ubuntu1~22.04.18.0.103-8.0.3-0ubuntu1~22.04.18.0.103-8.0.3-0ubuntu1~22.04.28.0.105-8.0.5-0ubuntu1~22.04.18.0.107-8.0.7-0ubuntu1~22.04.1
Show 21 moreShow less
8.0.108-8.0.8-0ubuntu1~22.04.18.0.110-8.0.10-0ubuntu1~22.04.18.0.111-8.0.11-0ubuntu1~22.04.18.0.112-8.0.12-0ubuntu1~22.04.18.0.114-8.0.14-0ubuntu1~22.04.18.0.115-8.0.15-0ubuntu1~22.04.18.0.116-8.0.16-0ubuntu1~22.04.18.0.117-8.0.17-0ubuntu1~22.04.18.0.118-8.0.18-0ubuntu1~22.04.18.0.119-8.0.19-0ubuntu1~22.04.18.0.120-8.0.20-0ubuntu1~22.04.18.0.121-8.0.21-0ubuntu1~22.04.18.0.122-8.0.22-0ubuntu1~22.04.18.0.123-8.0.23-0ubuntu1~22.04.18.0.124-8.0.24-0ubuntu1~22.04.18.0.125-8.0.25-0ubuntu1~22.04.18.0.126-8.0.26-0ubuntu1~22.04.18.0.127-8.0.27-0ubuntu1~22.04.18.0.128-8.0.28-0ubuntu1~22.04.18.0.129-8.0.29-0ubuntu1~22.04.18.0.130-8.0.30-0ubuntu1~22.04.1
8.0.131-8.0.31-0ubuntu1~22.04.1
dotnet10
Ubuntu:24.04:LTS
From an advisory covering 2 CVEs
 before 10.0.112-10.0.12-0ubuntu1~24.04.1, plus listed versions
10.0.100-10.0.0-0ubuntu1~24.04.110.0.101-10.0.1-0ubuntu1~24.04.210.0.103-10.0.3-0ubuntu1~24.04.110.0.104-10.0.4-0ubuntu1~24.04.110.0.105-10.0.5-0ubuntu1~24.04.1
Show 6 moreShow less
10.0.106-10.0.6-0ubuntu1~24.04.110.0.107-10.0.7-0ubuntu1~24.04.110.0.108-10.0.8-0ubuntu1~24.04.110.0.109-10.0.9-0ubuntu1~24.04.110.0.110-10.0.10-0ubuntu1~24.04.110.0.111-10.0.11-0ubuntu1~24.04.1
10.0.112-10.0.12-0ubuntu1~24.04.1
dotnet8
Ubuntu:24.04:LTS
From an advisory covering 2 CVEs
 before 8.0.131-8.0.31-0ubuntu1~24.04.1, plus listed versions
8.0.100-8.0.0~rc1-0ubuntu18.0.100-8.0.0~rc2-0ubuntu18.0.100-8.0.0~rc2-0ubuntu28.0.100-8.0.0-0ubuntu18.0.100-8.0.0-0ubuntu2
Show 30 moreShow less
8.0.101-8.0.1-0ubuntu18.0.101-8.0.1-0ubuntu28.0.102-8.0.2-0ubuntu18.0.103-8.0.3-0ubuntu28.0.103-8.0.3-0ubuntu38.0.104-8.0.4-0ubuntu18.0.105-8.0.5-0ubuntu1~24.04.18.0.107-8.0.7-0ubuntu1~24.04.18.0.108-8.0.8-0ubuntu1~24.04.18.0.108-8.0.8-0ubuntu1~24.04.28.0.110-8.0.10-0ubuntu1~24.04.18.0.111-8.0.11-0ubuntu1~24.04.18.0.112-8.0.12-0ubuntu1~24.04.18.0.114-8.0.14-0ubuntu1~24.04.18.0.115-8.0.15-0ubuntu1~24.04.18.0.116-8.0.16-0ubuntu1~24.04.18.0.117-8.0.17-0ubuntu1~24.04.18.0.118-8.0.18-0ubuntu1~24.04.18.0.119-8.0.19-0ubuntu1~24.04.18.0.120-8.0.20-0ubuntu1~24.04.18.0.121-8.0.21-0ubuntu1~24.04.18.0.122-8.0.22-0ubuntu1~24.04.18.0.123-8.0.23-0ubuntu1~24.04.18.0.124-8.0.24-0ubuntu1~24.04.18.0.125-8.0.25-0ubuntu1~24.04.18.0.126-8.0.26-0ubuntu1~24.04.18.0.127-8.0.27-0ubuntu1~24.04.18.0.128-8.0.28-0ubuntu1~24.04.18.0.129-8.0.29-0ubuntu1~24.04.18.0.130-8.0.30-0ubuntu1~24.04.1
8.0.131-8.0.31-0ubuntu1~24.04.1
dotnet10
Ubuntu:26.04:LTS
From an advisory covering 2 CVEs
 before 10.0.112-10.0.12-0ubuntu1~26.04.1, plus listed versions
10.0.100-10.0.0~rc1-0ubuntu110.0.100-10.0.0~rc2-0ubuntu110.0.100-10.0.0-0ubuntu110.0.100-10.0.0-0ubuntu210.0.101-10.0.1-0ubuntu1
Show 11 moreShow less
10.0.101-10.0.1-0ubuntu210.0.101-10.0.1-0ubuntu310.0.102-10.0.2-0ubuntu110.0.103-10.0.3-0ubuntu110.0.104-10.0.4-0ubuntu110.0.105-10.0.5-0ubuntu110.0.107-10.0.7-0ubuntu1~26.04.110.0.108-10.0.8-0ubuntu1~26.04.110.0.109-10.0.9-0ubuntu1~26.04.110.0.110-10.0.10-0ubuntu1~26.04.110.0.111-10.0.11-0ubuntu1~26.04.1
10.0.112-10.0.12-0ubuntu1~26.04.1

History

History
RecordedChangedSources
affected, facts
affected, aliases, referencesOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-58649 is a medium vulnerability (CVSS 6.5) in Microsoft .net, published September 8, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.36%, the 29th percentile. Fixed in dotnet10-runtime 10.0.13-r0.

References

Show 61 moreShow less
This page doesn't list everything

Left out here: 100 package rows. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open