{"id":"CVE-2026-32177","aliases":["ALPINE-CVE-2026-32177","BELL-CVE-2026-32177","BIT-dotnet-2026-32177","BIT-dotnet-sdk-2026-32177","EUVD-2026-29572","UBUNTU-CVE-2026-32177"],"status":"published","title":".NET Elevation of Privilege Vulnerability","description":"Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally.","severity":{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L/E:U/RL:O/RC:C","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00639,"percentile":0.51059,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-122","CWE-20","CWE-787"],"published":"2026-05-12T16:58:15Z","modified":"2026-11-03T06:33:02Z","fixes":[{"ecosystem":"Alpine:v3.23","package":"dotnet10-runtime","fixed_in":["10.0.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"dotnet10-runtime","fixed_in":["10.0.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"dotnet8-runtime","fixed_in":["8.0.27-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"dotnet8-runtime","fixed_in":["8.0.27-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"dotnet8-runtime","fixed_in":["8.0.27-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"dotnet8-runtime","fixed_in":["8.0.27-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"dotnet9-runtime","fixed_in":["9.0.16-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"dotnet9-runtime","fixed_in":["9.0.16-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"dotnet9-runtime","fixed_in":["9.0.16-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"dotnet9-runtime","fixed_in":["9.0.16-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"dotnet8-runtime","fixed_in":["8.0.27-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"dotnet8-runtime","fixed_in":["8.0.27-r0"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"dotnet","fixed_in":["8.0.27","9.0.16","10.0.8"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"dotnet-sdk","fixed_in":["8.0.27","9.0.16","10.0.8"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.23","package":"dotnet10-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"dotnet10-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"dotnet8-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.27-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"dotnet8-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.27-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"dotnet8-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.27-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"dotnet8-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.27-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"dotnet9-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.16-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"dotnet9-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.16-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"dotnet9-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.16-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"dotnet9-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.16-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"dotnet8-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0.17-r0"},{"fixed":"8.0.27-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"dotnet8-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0.11-r1"},{"fixed":"8.0.27-r0"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"dotnet","ranges":[{"type":"SEMVER","events":[{"introduced":"8.0.0"},{"fixed":"8.0.27"},{"introduced":"9.0.0"},{"fixed":"9.0.16"},{"introduced":"10.0.0"},{"fixed":"10.0.8"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"dotnet-sdk","ranges":[{"type":"SEMVER","events":[{"introduced":"8.0.0"},{"fixed":"8.0.27"},{"introduced":"9.0.0"},{"fixed":"9.0.16"},{"introduced":"10.0.0"},{"fixed":"10.0.8"}]}]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"dotnet7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["7.0.105-0ubuntu1~22.04.1","7.0.107-0ubuntu1~22.04.1","7.0.108-0ubuntu1~22.04.1","7.0.109-0ubuntu1~22.04.1","7.0.110-0ubuntu1~22.04.1","7.0.111-0ubuntu1~22.04.1","7.0.112-0ubuntu1~22.04.1","7.0.113-0ubuntu1~22.04.1","7.0.114-0ubuntu1~22.04.1","7.0.115-0ubuntu1~22.04.1","7.0.116-0ubuntu1~22.04.1","7.0.117-0ubuntu1~22.04.1","7.0.117-0ubuntu1~22.04.2","7.0.119-0ubuntu1~22.04.1"]}],"products":[{"vendor":"microsoft","product":".net"},{"vendor":"microsoft","product":".net 10.0"},{"vendor":"microsoft","product":".net 8.0"},{"vendor":"microsoft","product":".net 9.0"},{"vendor":"microsoft","product":".net_framework"},{"vendor":"microsoft","product":"microsoft .net framework 3.5"},{"vendor":"microsoft","product":"microsoft .net framework 3.5 and 4.7.2"},{"vendor":"microsoft","product":"microsoft .net framework 3.5 and 4.8"},{"vendor":"microsoft","product":"microsoft .net framework 3.5 and 4.8.1"},{"vendor":"microsoft","product":"microsoft .net framework 4.6.2/4.7/4.7.1/4.7.2"},{"vendor":"microsoft","product":"microsoft .net framework 4.8"},{"vendor":"microsoft","product":"microsoft visual studio 2022 version 17.12"},{"vendor":"microsoft","product":"microsoft visual studio 2022 version 17.14"},{"vendor":"microsoft","product":"microsoft visual studio 2026 version 18.5"},{"vendor":"microsoft","product":"visual_studio_2022"},{"vendor":"microsoft","product":"visual_studio_2026"},{"vendor":"red hat","product":"red hat enterprise linux 10"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"red hat","product":"red hat hardened images"}],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32177","tags":["vendor-advisory","patch","Vendor Advisory","advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-32177","tags":["vdb-entry","x_refsource_REDHAT","web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2476664","tags":["issue-tracking","x_refsource_REDHAT","web","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-32177.json","tags":["x_sadp-csaf-vex","web"]},{"url":"https://security.alpinelinux.org/vuln/CVE-2026-32177","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2026-32177","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-32177","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2026-32177","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-32177","tags":["report"]},{"url":"https://devblogs.microsoft.com/dotnet/dotnet-and-dotnet-framework-may-2026-servicing-updates","tags":["report"]},{"url":"https://github.com/dotnet/announcements/issues/399","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2026-32177","title":".NET Elevation of Privilege Vulnerability","description":"Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally.","status":"published","published":"2026-05-12T16:58:15.551Z","modified":"2026-08-10T15:14:01.192Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L/E:U/RL:O/RC:C","level":"high","assessor":"cna"},{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L","level":"high","assessor":"adp"}],"cwes":["CWE-122","CWE-20","CWE-122"],"updated_at":"2026-11-02T14:19:57.100857Z"}],"euvd":[{"id":"EUVD-2026-29572","description":"Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally.","status":"published","published":"2026-05-12T16:58:15Z","modified":"2026-08-10T15:14:01Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L/E:U/RL:O/RC:C","level":"high"}],"updated_at":"2026-11-02T18:02:01.941928Z"}],"nvd":[{"id":"CVE-2026-32177","description":"Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally.","status":"published","published":"2026-05-12T18:16:58.947Z","modified":"2026-07-15T02:19:53.077Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L","level":"high","assessor":"secondary"},{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L","level":"high","assessor":"secondary"}],"cwes":["CWE-20","CWE-122","CWE-787"],"updated_at":"2026-11-02T14:12:18.613259Z"}],"osv":[{"id":"ALPINE-CVE-2026-32177","description":"Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally.","status":"published","published":"2026-05-12T18:16:58.947Z","modified":"2026-11-03T06:33:02.354095577Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L","level":"high"}],"updated_at":"2026-11-03T07:15:53.944853Z"},{"id":"BELL-CVE-2026-32177","status":"published","published":"2026-05-19T14:03:07.375269Z","modified":"2026-05-20T07:15:03.881291519Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L","level":"high"}],"updated_at":"2026-11-02T15:28:23.572955Z"},{"id":"CVE-2026-32177","description":"Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally.","status":"published","published":"2026-05-12T18:16:58.947Z","modified":"2026-10-24T10:30:37.079650182Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L","level":"high"}],"updated_at":"2026-11-02T15:45:01.218144Z"},{"id":"UBUNTU-CVE-2026-32177","description":"Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally.","status":"published","published":"2026-05-12T18:16:00Z","modified":"2026-06-30T18:17:50.24711237Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L","level":"high"},{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L","level":"high"}],"updated_at":"2026-11-02T16:56:16.036833Z"},{"id":"BIT-dotnet-2026-32177","title":".NET Elevation of Privilege Vulnerability","description":"Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally.","status":"published","published":"2026-06-22T05:39:32.557Z","modified":"2026-09-10T16:01:00.05742667Z","updated_at":"2026-11-02T15:28:29.152062Z"},{"id":"BIT-dotnet-sdk-2026-32177","title":".NET Elevation of Privilege Vulnerability","description":"Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally.","status":"published","published":"2026-06-22T05:39:32.414Z","modified":"2026-09-10T16:00:59.267536389Z","updated_at":"2026-11-02T15:28:29.563843Z"}]}}