https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-03T23:56:45.751846+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2025-55247 CVE-2025-55247 — .NET Elevation of Privilege Vulnerability 2026-10-03T23:56:45.816683+00:00

Affected: Microsoft .NET 8.0, Microsoft .NET 9.0

Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.

 https://vulnerability.circl.lu/vuln/usn-7822-1 USN-7822-1 — dotnet8, dotnet9, dotnet10 vulnerabilities 2026-10-03T23:56:45.816787+00:00

Affected: Ubuntu:22.04:LTS: dotnet8, Ubuntu:24.04:LTS: dotnet8, Ubuntu:25.10: dotnet10, Ubuntu:25.10: dotnet8, Ubuntu:25.10: dotnet9

It was discovered that .NET did not properly handle the creation of temporary build time directories. An attacker could possibly use this issue to cause a denial of service. (CVE-2025-55247)

It was discovered that .NET did not properly establish TLS sessions for SMTP server connections. An attacker could use this issue to cause .NET to use unencrypted connections. This issue only affects .NET versions 8.0 and 9.0. (CVE-2025-55248)

It was discovered that .NET inconsistently interpreted certain http requests. An attacker could possibly use this to bypass a security feature over a network. (CVE-2025-55315)