Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2026-50650 (GCVE-0-2026-50650)
Vulnerability from cvelistv5 – Published: 2026-07-14 19:29 – Updated: 2026-08-03 22:56
VLAI
EPSS
VEX
Title
.NET Framework Elevation of Privilege Vulnerability
Summary
Improper control of generation of code ('code injection') in .NET Framework allows an unauthorized attacker to elevate privileges locally.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-94 - Improper Control of Generation of Code ('Code Injection')
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://msrc.microsoft.com/update-guide/vulnerabi… | vendor-advisorypatch |
Impacted products
11 products
| Vendor | Product | Version | |
|---|---|---|---|
| Microsoft | .NET 8.0 |
Affected:
8.0.0 , < 8.0.29
(custom)
|
|
| Microsoft | .NET 9.0 |
Affected:
9.0.0 , < 9.0.18
(custom)
|
|
| Microsoft | Microsoft .NET Framework 3.5 |
Affected:
3.5.0 , < 2.0.50727.8983 & 3.0.30729.8978
(custom)
|
|
| Microsoft | Microsoft .NET Framework 3.5 AND 4.7.2 |
Affected:
4.7.0 , < 2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0
(custom)
|
|
| Microsoft | Microsoft .NET Framework 3.5 AND 4.8 |
Affected:
4.8.0 , < 2.0.50727.9069 & 3.0.30729.9067 & 4.8.4803.0
(custom)
|
|
| Microsoft | Microsoft .NET Framework 3.5 AND 4.8.1 |
Affected:
4.8.1 , < 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0
(custom)
|
|
| Microsoft | Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 |
Affected:
4.7.0 , < 4.7.4143.0
(custom)
|
|
| Microsoft | Microsoft .NET Framework 4.8 |
Affected:
4.8.0 , < 4.8.4803.0
(custom)
|
|
| Microsoft | Microsoft Visual Studio 2022 version 17.12 |
Affected:
17.12.0 , < 17.12.22
(custom)
|
|
| Microsoft | Microsoft Visual Studio 2022 version 17.14 |
Affected:
17.14.0 , < 17.14.36
(custom)
|
|
| Microsoft | Microsoft Visual Studio 2026 version 18.7 |
Affected:
18.0 , < 18.7.4
(custom)
|
Date Public
2026-07-14 14:00
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-50650",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-07-15T03:57:16.992459Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-07-15T11:01:13.211Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": ".NET 8.0",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "8.0.29",
"status": "affected",
"version": "8.0.0",
"versionType": "custom"
}
]
},
{
"product": ".NET 9.0",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "9.0.18",
"status": "affected",
"version": "9.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"Windows Server 2012",
"Windows Server 2012 (Server Core installation)",
"Windows Server 2012 R2",
"Windows Server 2012 R2 (Server Core installation)"
],
"product": "Microsoft .NET Framework 3.5",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "2.0.50727.8983 \u0026 3.0.30729.8978",
"status": "affected",
"version": "3.5.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"Windows 10 Version 1607 for 32-bit Systems",
"Windows 10 Version 1607 for x64-based Systems",
"Windows 10 Version 1809 for 32-bit Systems",
"Windows 10 Version 1809 for x64-based Systems",
"Windows Server 2016",
"Windows Server 2016 (Server Core installation)",
"Windows Server 2019",
"Windows Server 2019 (Server Core installation)"
],
"product": "Microsoft .NET Framework 3.5 AND 4.7.2",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "2.0.50727.9069 \u0026 3.0.30729.9067 \u0026 4.7.4143.0",
"status": "affected",
"version": "4.7.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"Windows 10 Version 1809 for 32-bit Systems",
"Windows 10 Version 1809 for x64-based Systems",
"Windows 10 Version 21H2 for 32-bit Systems",
"Windows 10 Version 21H2 for ARM64-based Systems",
"Windows 10 Version 21H2 for x64-based Systems",
"Windows 10 Version 22H2 for 32-bit Systems",
"Windows 10 Version 22H2 for ARM64-based Systems",
"Windows 10 Version 22H2 for x64-based Systems",
"Windows Server 2019",
"Windows Server 2019 (Server Core installation)",
"Windows Server 2022",
"Windows Server 2022 (Server Core installation)"
],
"product": "Microsoft .NET Framework 3.5 AND 4.8",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "2.0.50727.9069 \u0026 3.0.30729.9067 \u0026 4.8.4803.0",
"status": "affected",
"version": "4.8.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"Windows 10 Version 21H2 for 32-bit Systems",
"Windows 10 Version 21H2 for ARM64-based Systems",
"Windows 10 Version 21H2 for x64-based Systems",
"Windows 10 Version 22H2 for 32-bit Systems",
"Windows 10 Version 22H2 for ARM64-based Systems",
"Windows 10 Version 22H2 for x64-based Systems",
"Windows 11 Version 23H2 for ARM64-based Systems",
"Windows 11 Version 23H2 for x64-based Systems",
"Windows 11 Version 24H2 for ARM64-based Systems",
"Windows 11 Version 24H2 for x64-based Systems",
"Windows 11 Version 25H2 for ARM64-based Systems",
"Windows 11 Version 25H2 for x64-based Systems",
"Windows 11 Version 26H1 for ARM64-based Systems",
"Windows 11 version 26H1 for x64-based Systems",
"Windows Server 2022",
"Windows Server 2022 (Server Core installation)"
],
"product": "Microsoft .NET Framework 3.5 AND 4.8.1",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "2.0.50727.9182 \u0026 3.0.30729.9168 \u0026 4.8.9339.0",
"status": "affected",
"version": "4.8.1",
"versionType": "custom"
}
]
},
{
"platforms": [
"Windows Server 2012",
"Windows Server 2012 (Server Core installation)",
"Windows Server 2012 R2",
"Windows Server 2012 R2 (Server Core installation)"
],
"product": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "4.7.4143.0",
"status": "affected",
"version": "4.7.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"Windows 10 Version 1607 for 32-bit Systems",
"Windows 10 Version 1607 for x64-based Systems",
"Windows Server 2012",
"Windows Server 2012 (Server Core installation)",
"Windows Server 2012 R2",
"Windows Server 2012 R2 (Server Core installation)",
"Windows Server 2016",
"Windows Server 2016 (Server Core installation)"
],
"product": "Microsoft .NET Framework 4.8",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "4.8.4803.0",
"status": "affected",
"version": "4.8.0",
"versionType": "custom"
}
]
},
{
"product": "Microsoft Visual Studio 2022 version 17.12",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "17.12.22",
"status": "affected",
"version": "17.12.0",
"versionType": "custom"
}
]
},
{
"product": "Microsoft Visual Studio 2022 version 17.14",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "17.14.36",
"status": "affected",
"version": "17.14.0",
"versionType": "custom"
}
]
},
{
"product": "Microsoft Visual Studio 2026 version 18.7",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "18.7.4",
"status": "affected",
"version": "18.0",
"versionType": "custom"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
"versionEndExcluding": "4.8.4803.0",
"versionStartIncluding": "4.8.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
"versionEndExcluding": "2.0.50727.9069 \u0026 3.0.30729.9067 \u0026 4.8.4803.0",
"versionStartIncluding": "4.8.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
"versionEndExcluding": "2.0.50727.9069 \u0026 3.0.30729.9067 \u0026 4.7.4143.0",
"versionStartIncluding": "4.7.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
"versionEndExcluding": "4.7.4143.0",
"versionStartIncluding": "4.7.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
"versionEndExcluding": "2.0.50727.9182 \u0026 3.0.30729.9168 \u0026 4.8.9339.0",
"versionStartIncluding": "4.8.1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
"versionEndExcluding": "2.0.50727.8983 \u0026 3.0.30729.8978",
"versionStartIncluding": "3.5.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
"versionEndExcluding": "8.0.29",
"versionStartIncluding": "8.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
"versionEndExcluding": "9.0.18",
"versionStartIncluding": "9.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:visual_studio_2026:*:*:*:*:*:*:*:*",
"versionEndExcluding": "18.7.4",
"versionStartIncluding": "18.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
"versionEndExcluding": "17.12.22",
"versionStartIncluding": "17.12.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
"versionEndExcluding": "17.14.36",
"versionStartIncluding": "17.14.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"datePublic": "2026-07-14T14:00:00.000Z",
"descriptions": [
{
"lang": "en-US",
"value": "Improper control of generation of code (\u0027code injection\u0027) in .NET Framework allows an unauthorized attacker to elevate privileges locally."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-94",
"description": "CWE-94: Improper Control of Generation of Code (\u0027Code Injection\u0027)",
"lang": "en-US",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-03T22:56:27.691Z",
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"shortName": "microsoft"
},
"references": [
{
"name": ".NET Framework Elevation of Privilege Vulnerability",
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50650"
}
],
"title": ".NET Framework Elevation of Privilege Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"assignerShortName": "microsoft",
"cveId": "CVE-2026-50650",
"datePublished": "2026-07-14T19:29:58.620Z",
"dateReserved": "2026-06-05T14:33:50.830Z",
"dateUpdated": "2026-08-03T22:56:27.691Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2026-50650",
"date": "2026-08-04",
"epss": "0.0029",
"percentile": "0.2121"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2026-50650\",\"sourceIdentifier\":\"secure@microsoft.com\",\"published\":\"2026-07-14T20:17:38.230\",\"lastModified\":\"2026-07-24T13:40:12.530\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Improper control of generation of code (\u0027code injection\u0027) in .NET Framework allows an unauthorized attacker to elevate privileges locally.\"}],\"affected\":[{\"source\":\"secure@microsoft.com\",\"affectedData\":[{\"vendor\":\"Microsoft\",\"product\":\".NET 8.0\",\"versions\":[{\"version\":\"8.0.0\",\"lessThan\":\"8.0.29\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Microsoft\",\"product\":\".NET 9.0\",\"versions\":[{\"version\":\"9.0.0\",\"lessThan\":\"9.0.18\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Microsoft\",\"product\":\"Microsoft .NET Framework 3.5\",\"platforms\":[\"Windows Server 2012\",\"Windows Server 2012 (Server Core installation)\",\"Windows Server 2012 R2\",\"Windows Server 2012 R2 (Server Core installation)\"],\"versions\":[{\"version\":\"3.5.0\",\"lessThan\":\"2.0.50727.8983 \u0026 3.0.30729.8978\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Microsoft\",\"product\":\"Microsoft .NET Framework 3.5 AND 4.7.2\",\"platforms\":[\"Windows 10 Version 1607 for 32-bit Systems\",\"Windows 10 Version 1607 for x64-based Systems\",\"Windows 10 Version 1809 for 32-bit Systems\",\"Windows 10 Version 1809 for x64-based Systems\",\"Windows Server 2016\",\"Windows Server 2016 (Server Core installation)\",\"Windows Server 2019\",\"Windows Server 2019 (Server Core installation)\"],\"versions\":[{\"version\":\"4.7.0\",\"lessThan\":\"2.0.50727.9069 \u0026 3.0.30729.9067 \u0026 4.7.4143.0\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Microsoft\",\"product\":\"Microsoft .NET Framework 3.5 AND 4.8\",\"platforms\":[\"Windows 10 Version 1809 for 32-bit Systems\",\"Windows 10 Version 1809 for x64-based Systems\",\"Windows 10 Version 21H2 for 32-bit Systems\",\"Windows 10 Version 21H2 for ARM64-based Systems\",\"Windows 10 Version 21H2 for x64-based Systems\",\"Windows 10 Version 22H2 for 32-bit Systems\",\"Windows 10 Version 22H2 for ARM64-based Systems\",\"Windows 10 Version 22H2 for x64-based Systems\",\"Windows Server 2019\",\"Windows Server 2019 (Server Core installation)\",\"Windows Server 2022\",\"Windows Server 2022 (Server Core installation)\"],\"versions\":[{\"version\":\"4.8.0\",\"lessThan\":\"2.0.50727.9069 \u0026 3.0.30729.9067 \u0026 4.8.4803.0\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Microsoft\",\"product\":\"Microsoft .NET Framework 3.5 AND 4.8.1\",\"platforms\":[\"Windows 10 Version 21H2 for 32-bit Systems\",\"Windows 10 Version 21H2 for ARM64-based Systems\",\"Windows 10 Version 21H2 for x64-based Systems\",\"Windows 10 Version 22H2 for 32-bit Systems\",\"Windows 10 Version 22H2 for ARM64-based Systems\",\"Windows 10 Version 22H2 for x64-based Systems\",\"Windows 11 Version 23H2 for ARM64-based Systems\",\"Windows 11 Version 23H2 for x64-based Systems\",\"Windows 11 Version 24H2 for ARM64-based Systems\",\"Windows 11 Version 24H2 for x64-based Systems\",\"Windows 11 Version 25H2 for ARM64-based Systems\",\"Windows 11 Version 25H2 for x64-based Systems\",\"Windows 11 Version 26H1 for ARM64-based Systems\",\"Windows 11 version 26H1 for x64-based Systems\",\"Windows Server 2022\",\"Windows Server 2022 (Server Core installation)\"],\"versions\":[{\"version\":\"4.8.1\",\"lessThan\":\"2.0.50727.9182 \u0026 3.0.30729.9168 \u0026 4.8.9339.0\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Microsoft\",\"product\":\"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2\",\"platforms\":[\"Windows Server 2012\",\"Windows Server 2012 (Server Core installation)\",\"Windows Server 2012 R2\",\"Windows Server 2012 R2 (Server Core installation)\"],\"versions\":[{\"version\":\"4.7.0\",\"lessThan\":\"4.7.4143.0\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Microsoft\",\"product\":\"Microsoft .NET Framework 4.8\",\"platforms\":[\"Windows 10 Version 1607 for 32-bit Systems\",\"Windows 10 Version 1607 for x64-based Systems\",\"Windows Server 2012\",\"Windows Server 2012 (Server Core installation)\",\"Windows Server 2012 R2\",\"Windows Server 2012 R2 (Server Core installation)\",\"Windows Server 2016\",\"Windows Server 2016 (Server Core installation)\"],\"versions\":[{\"version\":\"4.8.0\",\"lessThan\":\"4.8.4803.0\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Visual Studio 2022 version 17.12\",\"versions\":[{\"version\":\"17.12.0\",\"lessThan\":\"17.12.22\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Visual Studio 2022 version 17.14\",\"versions\":[{\"version\":\"17.14.0\",\"lessThan\":\"17.14.36\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Visual Studio 2026 version 18.7\",\"versions\":[{\"version\":\"18.0\",\"lessThan\":\"18.7.4\",\"versionType\":\"custom\",\"status\":\"affected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"secure@microsoft.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-07-15T03:57:16.992459Z\",\"id\":\"CVE-2026-50650\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"total\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"secure@microsoft.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-94\"}]}],\"configurations\":[{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net_framework:4.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2D3F18AF-84ED-473B-A8DF-65EB23C475AF\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x64:*\",\"matchCriteriaId\":\"5E491E46-1917-41FE-8F9A-BB0BDDEB42C3\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x86:*\",\"matchCriteriaId\":\"0A1BC97A-263E-4291-8AEF-02EE4E6031E9\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A7DF96F8-BA6A-4780-9CA3-F719B3F81074\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DB18C4CE-5917-401E-ACF7-2747084FD36E\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net_framework:4.6.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A16AD2B0-2189-4E8E-B7FC-CE598CA1CB2D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net_framework:4.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"734112B3-1383-4BE3-8721-C0F84566B764\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net_framework:4.7.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"36B0E40A-84EF-4099-A395-75D6B8CDA196\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net_framework:4.7.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3EF7A75E-EE27-4AA7-8D84-9D696728A4CE\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A7DF96F8-BA6A-4780-9CA3-F719B3F81074\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DB18C4CE-5917-401E-ACF7-2747084FD36E\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net_framework:3.5:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"23317443-1968-4791-9F20-AD3B308A83D1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net_framework:4.8.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"934D4E46-12C1-41DC-A28C-A2C430E965E4\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:arm64:*\",\"matchCriteriaId\":\"8FC46499-DB6E-48BF-9334-85EE27AFE7AF\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x64:*\",\"matchCriteriaId\":\"83A79DD6-E74E-419F-93F1-323B68502633\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x86:*\",\"matchCriteriaId\":\"61959ACC-B608-4556-92AF-4D94B338907A\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:arm64:*\",\"matchCriteriaId\":\"A9D54EE6-30AF-411C-A285-A4DCB6C6EC06\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x64:*\",\"matchCriteriaId\":\"C230D3BF-7FCE-405C-B62E-B9190C995C3C\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x86:*\",\"matchCriteriaId\":\"1FD62DCB-66D1-4CEA-828E-0BD302AC63CA\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_11_23h2:-:*:*:*:*:*:arm64:*\",\"matchCriteriaId\":\"B0301BA0-81DB-4FC1-9BC3-EB48A56BC608\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_11_23h2:-:*:*:*:*:*:x64:*\",\"matchCriteriaId\":\"8E3C1327-F331-4448-A253-00EAC7428317\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_11_24h2:-:*:*:*:*:*:arm64:*\",\"matchCriteriaId\":\"08EE1F3A-A8DE-4867-BB5B-8A8ED867F3CA\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_11_24h2:-:*:*:*:*:*:x64:*\",\"matchCriteriaId\":\"B1670829-6A8C-4688-B7A5-3DFB878A4861\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_11_25h2:-:*:*:*:*:*:arm64:*\",\"matchCriteriaId\":\"024EE6EC-6D62-4EAC-B1EF-A5E4EAD439A1\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_11_25h2:-:*:*:*:*:*:x64:*\",\"matchCriteriaId\":\"25D142AB-B61D-43F3-B7E6-DB9140EFEF75\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_11_26h1:-:*:*:*:*:*:arm64:*\",\"matchCriteriaId\":\"CBFE0371-0C4D-406A-9EC7-456104271C3E\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_11_26h1:-:*:*:*:*:*:x64:*\",\"matchCriteriaId\":\"F2B83840-FCE8-445A-AE55-ACEDA6534FA1\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"821614DD-37DD-44E2-A8A4-FE8D23A33C3C\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net_framework:3.5:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"23317443-1968-4791-9F20-AD3B308A83D1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net_framework:4.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2D3F18AF-84ED-473B-A8DF-65EB23C475AF\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x64:*\",\"matchCriteriaId\":\"306B7CE6-8239-4AED-9ED4-4C9F5B349F58\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x86:*\",\"matchCriteriaId\":\"345FCD64-D37B-425B-B64C-8B1640B7E850\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:arm64:*\",\"matchCriteriaId\":\"8FC46499-DB6E-48BF-9334-85EE27AFE7AF\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x64:*\",\"matchCriteriaId\":\"83A79DD6-E74E-419F-93F1-323B68502633\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x86:*\",\"matchCriteriaId\":\"61959ACC-B608-4556-92AF-4D94B338907A\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:arm64:*\",\"matchCriteriaId\":\"A9D54EE6-30AF-411C-A285-A4DCB6C6EC06\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x64:*\",\"matchCriteriaId\":\"C230D3BF-7FCE-405C-B62E-B9190C995C3C\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x86:*\",\"matchCriteriaId\":\"1FD62DCB-66D1-4CEA-828E-0BD302AC63CA\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DB79EE26-FC32-417D-A49C-A1A63165A968\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"821614DD-37DD-44E2-A8A4-FE8D23A33C3C\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net_framework:3.5:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"23317443-1968-4791-9F20-AD3B308A83D1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net_framework:4.7.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3EF7A75E-EE27-4AA7-8D84-9D696728A4CE\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x64:*\",\"matchCriteriaId\":\"5E491E46-1917-41FE-8F9A-BB0BDDEB42C3\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x86:*\",\"matchCriteriaId\":\"0A1BC97A-263E-4291-8AEF-02EE4E6031E9\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x64:*\",\"matchCriteriaId\":\"306B7CE6-8239-4AED-9ED4-4C9F5B349F58\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x86:*\",\"matchCriteriaId\":\"345FCD64-D37B-425B-B64C-8B1640B7E850\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DB79EE26-FC32-417D-A49C-A1A63165A968\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net_framework:3.5:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"23317443-1968-4791-9F20-AD3B308A83D1\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A7DF96F8-BA6A-4780-9CA3-F719B3F81074\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DB18C4CE-5917-401E-ACF7-2747084FD36E\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"8.0.0\",\"versionEndExcluding\":\"8.0.29\",\"matchCriteriaId\":\"1144FF26-EDCE-4609-A3E8-56DD190B0953\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"9.0.0\",\"versionEndExcluding\":\"9.0.18\",\"matchCriteriaId\":\"140E7E20-8E57-462D-B4B5-8A26B4A23925\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A2572D17-1DE6-457B-99CC-64AFD54487EA\"}]}]}],\"references\":[{\"url\":\"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50650\",\"source\":\"secure@microsoft.com\",\"tags\":[\"Patch\",\"Vendor Advisory\"]}]}}",
"redhat_vex": {
"aggregate_severity": "Important",
"current_release_date": "2026-07-23T02:38:35+00:00",
"cve": "CVE-2026-50650",
"id": "CVE-2026-50650",
"initial_release_date": "2026-07-14T19:29:58.620000+00:00",
"product_status:fixed": "943",
"product_status:known_not_affected": "2",
"source": "Red Hat CSAF VEX",
"status": "final",
"title": "dotnet: .NET Framework: Privilege escalation via code injection",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50650.json",
"version": "3"
},
"suse_vex": {
"aggregate_severity": "important",
"current_release_date": "2026-07-26T23:31:39Z",
"cve": "CVE-2026-50650",
"id": "CVE-2026-50650",
"initial_release_date": "2026-07-22T16:26:35Z",
"product_status:recommended": "121",
"source": "SUSE CSAF VEX",
"status": "interim",
"title": "SUSE CVE CVE-2026-50650",
"url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-50650.json",
"version": "5"
},
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-50650\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-07-15T03:57:16.992459Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-07-15T11:01:08.487Z\"}}], \"cna\": {\"title\": \".NET Framework Elevation of Privilege Vulnerability\", \"metrics\": [{\"format\": \"CVSS\", \"cvssV3_1\": {\"version\": \"3.1\", \"baseScore\": 7.8, \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C\"}, \"scenarios\": [{\"lang\": \"en-US\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"vendor\": \"Microsoft\", \"product\": \".NET 8.0\", \"versions\": [{\"status\": \"affected\", \"version\": \"8.0.0\", \"lessThan\": \"8.0.29\", \"versionType\": \"custom\"}]}, {\"vendor\": \"Microsoft\", \"product\": \".NET 9.0\", \"versions\": [{\"status\": \"affected\", \"version\": \"9.0.0\", \"lessThan\": \"9.0.18\", \"versionType\": \"custom\"}]}, {\"vendor\": \"Microsoft\", \"product\": \"Microsoft .NET Framework 3.5\", \"versions\": [{\"status\": \"affected\", \"version\": \"3.5.0\", \"lessThan\": \"2.0.50727.8983 \u0026 3.0.30729.8978\", \"versionType\": \"custom\"}], \"platforms\": [\"Windows Server 2012\", \"Windows Server 2012 (Server Core installation)\", \"Windows Server 2012 R2\", \"Windows Server 2012 R2 (Server Core installation)\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Microsoft .NET Framework 3.5 AND 4.7.2\", \"versions\": [{\"status\": \"affected\", \"version\": \"4.7.0\", \"lessThan\": \"2.0.50727.9069 \u0026 3.0.30729.9067 \u0026 4.7.4143.0\", \"versionType\": \"custom\"}], \"platforms\": [\"Windows 10 Version 1607 for 32-bit Systems\", \"Windows 10 Version 1607 for x64-based Systems\", \"Windows 10 Version 1809 for 32-bit Systems\", \"Windows 10 Version 1809 for x64-based Systems\", \"Windows Server 2016\", \"Windows Server 2016 (Server Core installation)\", \"Windows Server 2019\", \"Windows Server 2019 (Server Core installation)\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Microsoft .NET Framework 3.5 AND 4.8\", \"versions\": [{\"status\": \"affected\", \"version\": \"4.8.0\", \"lessThan\": \"2.0.50727.9069 \u0026 3.0.30729.9067 \u0026 4.8.4803.0\", \"versionType\": \"custom\"}], \"platforms\": [\"Windows 10 Version 1809 for 32-bit Systems\", \"Windows 10 Version 1809 for x64-based Systems\", \"Windows 10 Version 21H2 for 32-bit Systems\", \"Windows 10 Version 21H2 for ARM64-based Systems\", \"Windows 10 Version 21H2 for x64-based Systems\", \"Windows 10 Version 22H2 for 32-bit Systems\", \"Windows 10 Version 22H2 for ARM64-based Systems\", \"Windows 10 Version 22H2 for x64-based Systems\", \"Windows Server 2019\", \"Windows Server 2019 (Server Core installation)\", \"Windows Server 2022\", \"Windows Server 2022 (Server Core installation)\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Microsoft .NET Framework 3.5 AND 4.8.1\", \"versions\": [{\"status\": \"affected\", \"version\": \"4.8.1\", \"lessThan\": \"2.0.50727.9182 \u0026 3.0.30729.9168 \u0026 4.8.9339.0\", \"versionType\": \"custom\"}], \"platforms\": [\"Windows 10 Version 21H2 for 32-bit Systems\", \"Windows 10 Version 21H2 for ARM64-based Systems\", \"Windows 10 Version 21H2 for x64-based Systems\", \"Windows 10 Version 22H2 for 32-bit Systems\", \"Windows 10 Version 22H2 for ARM64-based Systems\", \"Windows 10 Version 22H2 for x64-based Systems\", \"Windows 11 Version 23H2 for ARM64-based Systems\", \"Windows 11 Version 23H2 for x64-based Systems\", \"Windows 11 Version 24H2 for ARM64-based Systems\", \"Windows 11 Version 24H2 for x64-based Systems\", \"Windows 11 Version 25H2 for ARM64-based Systems\", \"Windows 11 Version 25H2 for x64-based Systems\", \"Windows 11 Version 26H1 for ARM64-based Systems\", \"Windows 11 version 26H1 for x64-based Systems\", \"Windows Server 2022\", \"Windows Server 2022 (Server Core installation)\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2\", \"versions\": [{\"status\": \"affected\", \"version\": \"4.7.0\", \"lessThan\": \"4.7.4143.0\", \"versionType\": \"custom\"}], \"platforms\": [\"Windows Server 2012\", \"Windows Server 2012 (Server Core installation)\", \"Windows Server 2012 R2\", \"Windows Server 2012 R2 (Server Core installation)\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Microsoft .NET Framework 4.8\", \"versions\": [{\"status\": \"affected\", \"version\": \"4.8.0\", \"lessThan\": \"4.8.4803.0\", \"versionType\": \"custom\"}], \"platforms\": [\"Windows 10 Version 1607 for 32-bit Systems\", \"Windows 10 Version 1607 for x64-based Systems\", \"Windows Server 2012\", \"Windows Server 2012 (Server Core installation)\", \"Windows Server 2012 R2\", \"Windows Server 2012 R2 (Server Core installation)\", \"Windows Server 2016\", \"Windows Server 2016 (Server Core installation)\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Microsoft Visual Studio 2022 version 17.12\", \"versions\": [{\"status\": \"affected\", \"version\": \"17.12.0\", \"lessThan\": \"17.12.22\", \"versionType\": \"custom\"}]}, {\"vendor\": \"Microsoft\", \"product\": \"Microsoft Visual Studio 2022 version 17.14\", \"versions\": [{\"status\": \"affected\", \"version\": \"17.14.0\", \"lessThan\": \"17.14.36\", \"versionType\": \"custom\"}]}, {\"vendor\": \"Microsoft\", \"product\": \"Microsoft Visual Studio 2026 version 18.7\", \"versions\": [{\"status\": \"affected\", \"version\": \"18.0\", \"lessThan\": \"18.7.4\", \"versionType\": \"custom\"}]}], \"datePublic\": \"2026-07-14T14:00:00.000Z\", \"references\": [{\"url\": \"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50650\", \"name\": \".NET Framework Elevation of Privilege Vulnerability\", \"tags\": [\"vendor-advisory\", \"patch\"]}], \"descriptions\": [{\"lang\": \"en-US\", \"value\": \"Improper control of generation of code (\u0027code injection\u0027) in .NET Framework allows an unauthorized attacker to elevate privileges locally.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en-US\", \"type\": \"CWE\", \"cweId\": \"CWE-94\", \"description\": \"CWE-94: Improper Control of Generation of Code (\u0027Code Injection\u0027)\"}]}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"4.8.4803.0\", \"versionStartIncluding\": \"4.8.0\"}, {\"criteria\": \"cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"2.0.50727.9069 \u0026 3.0.30729.9067 \u0026 4.8.4803.0\", \"versionStartIncluding\": \"4.8.0\"}, {\"criteria\": \"cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"2.0.50727.9069 \u0026 3.0.30729.9067 \u0026 4.7.4143.0\", \"versionStartIncluding\": \"4.7.0\"}, {\"criteria\": \"cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"4.7.4143.0\", \"versionStartIncluding\": \"4.7.0\"}, {\"criteria\": \"cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"2.0.50727.9182 \u0026 3.0.30729.9168 \u0026 4.8.9339.0\", \"versionStartIncluding\": \"4.8.1\"}, {\"criteria\": \"cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"2.0.50727.8983 \u0026 3.0.30729.8978\", \"versionStartIncluding\": \"3.5.0\"}, {\"criteria\": \"cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"8.0.29\", \"versionStartIncluding\": \"8.0.0\"}, {\"criteria\": \"cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"9.0.18\", \"versionStartIncluding\": \"9.0.0\"}, {\"criteria\": \"cpe:2.3:a:microsoft:visual_studio_2026:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"18.7.4\", \"versionStartIncluding\": \"18.0\"}, {\"criteria\": \"cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"17.12.22\", \"versionStartIncluding\": \"17.12.0\"}, {\"criteria\": \"cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"17.14.36\", \"versionStartIncluding\": \"17.14.0\"}], \"operator\": \"OR\"}]}], \"providerMetadata\": {\"orgId\": \"f38d906d-7342-40ea-92c1-6c4a2c6478c8\", \"shortName\": \"microsoft\", \"dateUpdated\": \"2026-08-03T22:56:27.691Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2026-50650\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-08-03T22:56:27.691Z\", \"dateReserved\": \"2026-06-05T14:33:50.830Z\", \"assignerOrgId\": \"f38d906d-7342-40ea-92c1-6c4a2c6478c8\", \"datePublished\": \"2026-07-14T19:29:58.620Z\", \"assignerShortName\": \"microsoft\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
CERTFR-2026-AVI-0869
Vulnerability from certfr_avis - Published: 2026-07-15 - Updated: 2026-07-15
De multiples vulnérabilités ont été découvertes dans Microsoft Windows. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.
Microsoft indique que la vulnérabilité CVE-2026-56155 est activement exploitée.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Microsoft | Windows | .NET 10.0 installed sur Windows versions antérieures à 10.0.6 | ||
| Microsoft | Windows | Windows Server 2012 versions antérieures à 6.2.9200.26226 | ||
| Microsoft | Windows | Windows Server 2012 R2 (Server Core installation) versions antérieures à 6.3.9600.23291 | ||
| Microsoft | Windows | Windows 10 Version 22H2 pour systèmes ARM64 versions antérieures à 10.0.19044.7548 | ||
| Microsoft | Windows | Windows Server 2012 versions antérieures à 6.2.9200.26132 | ||
| Microsoft | Windows | Windows 11 Version 26H1 pour systèmes ARM64 versions antérieures à 10.0.28000.2269 | ||
| Microsoft | Windows | Windows Server 2022 (Server Core installation) versions antérieures à 10.0.20348.5386 | ||
| Microsoft | Windows | Windows 11 Version 24H2 pour systèmes x64 versions antérieures à 10.0.26100.8875 | ||
| Microsoft | Windows | Windows Subsystem pour Linux (WSL2) versions antérieures à 2.7.10 | ||
| Microsoft | Windows | Windows Server 2012 R2 (Server Core installation) versions antérieures à 1.000 | ||
| Microsoft | Windows | Windows 11 Version 25H2 pour systèmes ARM64 versions antérieures à 10.0.26100.8875 | ||
| Microsoft | Windows | Windows Server 2025 (Server Core installation) versions antérieures à 10.0.26100.33158 | ||
| Microsoft | Windows | Windows Server 2012 (Server Core installation) versions antérieures à 1.000 | ||
| Microsoft | Windows | Windows Server 2025 versions antérieures à 10.0.26100.33158 | ||
| Microsoft | Windows | Windows Server 2012 R2 (Server Core installation) versions antérieures à 6.3.9600.23228 | ||
| Microsoft | Windows | Surface Windows Dev Kit | ||
| Microsoft | Windows | Windows Server 2019 versions antérieures à 10.0.17763.9020 | ||
| Microsoft | Windows | Windows Server 2012 R2 versions antérieures à 6.3.9600.23228 | ||
| Microsoft | Windows | Windows Terminal pour Windows 11 versions antérieures à 1.24.11321.0 | ||
| Microsoft | Windows | Windows Server 2022 versions antérieures à 10.0.20348.5386 | ||
| Microsoft | Windows | Windows 10 Version 1809 pour systèmes x64 versions antérieures à 10.0.17763.9020 | ||
| Microsoft | Windows | Windows 10 Version 22H2 pour systèmes x64 versions antérieures à 10.0.19045.7548 | ||
| Microsoft | Windows | Windows Server 2012 R2 versions antérieures à 6.3.9600.23291 | ||
| Microsoft | Windows | Windows Server 2012 R2 versions antérieures à 1.000 | ||
| Microsoft | Windows | Windows 11 Version 26H1 pour systèmes ARM64 versions antérieures à 10.0.28000.2113 | ||
| Microsoft | Windows | Windows 11 Version 23H2 pour systèmes ARM64 versions antérieures à 10.0.22631.7376 | ||
| Microsoft | Windows | Windows 11 Version 24H2 pour systèmes ARM64 versions antérieures à 10.0.26100.8875 | ||
| Microsoft | Windows | Windows 10 Version 1607 pour systèmes x64 versions antérieures à 10.0.14393.9339 | ||
| Microsoft | Windows | Windows 10 Version 21H2 pour systèmes 32 bits versions antérieures à 10.0.19044.7548 | ||
| Microsoft | Windows | Windows Server 2012 versions antérieures à 1.000 | ||
| Microsoft | Windows | .NET 8.0 installed sur Windows versions antérieures à 8.0.29 | ||
| Microsoft | Windows | Windows Terminal pour Windows 10 versions antérieures à 1.24.11321.0 | ||
| Microsoft | Windows | Windows 10 Version 1607 pour systèmes 32 bits versions antérieures à 10.0.14393.9339 | ||
| Microsoft | Windows | Windows 11 Version 26H1 pour systèmes ARM64 versions antérieures à 10.0.28000.2525 | ||
| Microsoft | Windows | Windows 11 Version 25H2 pour systèmes x64 versions antérieures à 10.0.26200.8875 | ||
| Microsoft | Windows | Windows 10 Version 21H2 pour systèmes ARM64 versions antérieures à 10.0.19044.7548 | ||
| Microsoft | Windows | Windows Server 2012 (Server Core installation) versions antérieures à 6.2.9200.26226 | ||
| Microsoft | Windows | Windows 11 Version 23H2 pour systèmes x64 versions antérieures à 10.0.22631.7376 | ||
| Microsoft | Windows | Windows 10 Version 22H2 pour systèmes 32 bits versions antérieures à 10.0.19045.7548 | ||
| Microsoft | Windows | Windows 10 Version 21H2 pour systèmes x64 versions antérieures à 10.0.19044.7548 | ||
| Microsoft | Windows | Windows Server 2019 (Server Core installation) versions antérieures à 10.0.17763.9020 | ||
| Microsoft | Windows | Windows 10 Version 1809 pour systèmes 32 bits versions antérieures à 10.0.17763.9020 | ||
| Microsoft | Windows | Windows Admin Center versions antérieures à 2.7.4 | ||
| Microsoft | Windows | Windows Server 2016 versions antérieures à 10.0.14393.9339 | ||
| Microsoft | Windows | Windows 11 Version 25H2 pour systèmes ARM64 versions antérieures à 10.0.26200.8875 | ||
| Microsoft | Windows | Windows 10 Version 22H2 pour systèmes ARM64 versions antérieures à 10.0.19045.7548 | ||
| Microsoft | Windows | .NET 9.0 installed sur Windows versions antérieures à 9.0.18 | ||
| Microsoft | Windows | Windows Subsystem pour Linux (WSL2) versions antérieures à 2.7.8 | ||
| Microsoft | Windows | Windows Remote Help versions antérieures à 5.2.1037.0 | ||
| Microsoft | Windows | Windows 11 Version 25H2 pour systèmes x64 versions antérieures à 10.0.26100.8875 | ||
| Microsoft | Windows | Windows 11 version 26H1 pour systèmes x64 antérieures à 10.0.28000.2525 | ||
| Microsoft | Windows | Windows Server 2012 (Server Core installation) versions antérieures à 6.2.9200.26132 | ||
| Microsoft | Windows | Windows 11 version 26H1 pour systèmes x64 antérieures à 10.0.28000.2269 | ||
| Microsoft | Windows | Windows Admin Center versions antérieures à 2.6.5.16 | ||
| Microsoft | Windows | Windows Server 2016 (Server Core installation) versions antérieures à 10.0.14393.9339 |
References
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": ".NET 10.0 installed sur Windows versions ant\u00e9rieures \u00e0 10.0.6",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2012 versions ant\u00e9rieures \u00e0 6.2.9200.26226",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2012 R2 (Server Core installation) versions ant\u00e9rieures \u00e0 6.3.9600.23291",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 22H2 pour syst\u00e8mes ARM64 versions ant\u00e9rieures \u00e0 10.0.19044.7548",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2012 versions ant\u00e9rieures \u00e0 6.2.9200.26132",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 11 Version 26H1 pour syst\u00e8mes ARM64 versions ant\u00e9rieures \u00e0 10.0.28000.2269",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2022 (Server Core installation) versions ant\u00e9rieures \u00e0 10.0.20348.5386",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 11 Version 24H2 pour syst\u00e8mes x64 versions ant\u00e9rieures \u00e0 10.0.26100.8875",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Subsystem pour Linux (WSL2) versions ant\u00e9rieures \u00e0 2.7.10",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2012 R2 (Server Core installation) versions ant\u00e9rieures \u00e0 1.000",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 11 Version 25H2 pour syst\u00e8mes ARM64 versions ant\u00e9rieures \u00e0 10.0.26100.8875",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2025 (Server Core installation) versions ant\u00e9rieures \u00e0 10.0.26100.33158",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2012 (Server Core installation) versions ant\u00e9rieures \u00e0 1.000",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2025 versions ant\u00e9rieures \u00e0 10.0.26100.33158",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2012 R2 (Server Core installation) versions ant\u00e9rieures \u00e0 6.3.9600.23228",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Surface Windows Dev Kit",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2019 versions ant\u00e9rieures \u00e0 10.0.17763.9020",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2012 R2 versions ant\u00e9rieures \u00e0 6.3.9600.23228",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Terminal pour Windows 11 versions ant\u00e9rieures \u00e0 1.24.11321.0",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2022 versions ant\u00e9rieures \u00e0 10.0.20348.5386",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 1809 pour syst\u00e8mes x64 versions ant\u00e9rieures \u00e0 10.0.17763.9020",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 22H2 pour syst\u00e8mes x64 versions ant\u00e9rieures \u00e0 10.0.19045.7548",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2012 R2 versions ant\u00e9rieures \u00e0 6.3.9600.23291",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2012 R2 versions ant\u00e9rieures \u00e0 1.000",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 11 Version 26H1 pour syst\u00e8mes ARM64 versions ant\u00e9rieures \u00e0 10.0.28000.2113",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 11 Version 23H2 pour syst\u00e8mes ARM64 versions ant\u00e9rieures \u00e0 10.0.22631.7376",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 11 Version 24H2 pour syst\u00e8mes ARM64 versions ant\u00e9rieures \u00e0 10.0.26100.8875",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 1607 pour syst\u00e8mes x64 versions ant\u00e9rieures \u00e0 10.0.14393.9339",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 21H2 pour syst\u00e8mes 32 bits versions ant\u00e9rieures \u00e0 10.0.19044.7548",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2012 versions ant\u00e9rieures \u00e0 1.000",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": ".NET 8.0 installed sur Windows versions ant\u00e9rieures \u00e0 8.0.29",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Terminal pour Windows 10 versions ant\u00e9rieures \u00e0 1.24.11321.0",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 1607 pour syst\u00e8mes 32 bits versions ant\u00e9rieures \u00e0 10.0.14393.9339",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 11 Version 26H1 pour syst\u00e8mes ARM64 versions ant\u00e9rieures \u00e0 10.0.28000.2525",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 11 Version 25H2 pour syst\u00e8mes x64 versions ant\u00e9rieures \u00e0 10.0.26200.8875",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 21H2 pour syst\u00e8mes ARM64 versions ant\u00e9rieures \u00e0 10.0.19044.7548",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2012 (Server Core installation) versions ant\u00e9rieures \u00e0 6.2.9200.26226",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 11 Version 23H2 pour syst\u00e8mes x64 versions ant\u00e9rieures \u00e0 10.0.22631.7376",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 22H2 pour syst\u00e8mes 32 bits versions ant\u00e9rieures \u00e0 10.0.19045.7548",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 21H2 pour syst\u00e8mes x64 versions ant\u00e9rieures \u00e0 10.0.19044.7548",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2019 (Server Core installation) versions ant\u00e9rieures \u00e0 10.0.17763.9020",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 1809 pour syst\u00e8mes 32 bits versions ant\u00e9rieures \u00e0 10.0.17763.9020",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Admin Center versions ant\u00e9rieures \u00e0 2.7.4",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2016 versions ant\u00e9rieures \u00e0 10.0.14393.9339",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 11 Version 25H2 pour syst\u00e8mes ARM64 versions ant\u00e9rieures \u00e0 10.0.26200.8875",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 22H2 pour syst\u00e8mes ARM64 versions ant\u00e9rieures \u00e0 10.0.19045.7548",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": ".NET 9.0 installed sur Windows versions ant\u00e9rieures \u00e0 9.0.18",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Subsystem pour Linux (WSL2) versions ant\u00e9rieures \u00e0 2.7.8",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Remote Help versions ant\u00e9rieures \u00e0 5.2.1037.0",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 11 Version 25H2 pour syst\u00e8mes x64 versions ant\u00e9rieures \u00e0 10.0.26100.8875",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 11 version 26H1 pour syst\u00e8mes x64 ant\u00e9rieures \u00e0 10.0.28000.2525",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2012 (Server Core installation) versions ant\u00e9rieures \u00e0 6.2.9200.26132",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 11 version 26H1 pour syst\u00e8mes x64 ant\u00e9rieures \u00e0 10.0.28000.2269",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Admin Center versions ant\u00e9rieures \u00e0 2.6.5.16",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2016 (Server Core installation) versions ant\u00e9rieures \u00e0 10.0.14393.9339",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-50437",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50437"
},
{
"name": "CVE-2026-50489",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50489"
},
{
"name": "CVE-2026-50359",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50359"
},
{
"name": "CVE-2026-50393",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50393"
},
{
"name": "CVE-2026-50336",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50336"
},
{
"name": "CVE-2026-58547",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58547"
},
{
"name": "CVE-2026-50425",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50425"
},
{
"name": "CVE-2026-56190",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56190"
},
{
"name": "CVE-2026-50504",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50504"
},
{
"name": "CVE-2026-54993",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54993"
},
{
"name": "CVE-2026-58534",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58534"
},
{
"name": "CVE-2026-50439",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50439"
},
{
"name": "CVE-2026-49798",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-49798"
},
{
"name": "CVE-2026-50415",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50415"
},
{
"name": "CVE-2026-50329",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50329"
},
{
"name": "CVE-2026-50524",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50524"
},
{
"name": "CVE-2026-50402",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50402"
},
{
"name": "CVE-2026-49165",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-49165"
},
{
"name": "CVE-2026-58545",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58545"
},
{
"name": "CVE-2026-50364",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50364"
},
{
"name": "CVE-2026-56188",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56188"
},
{
"name": "CVE-2026-50404",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50404"
},
{
"name": "CVE-2026-50690",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50690"
},
{
"name": "CVE-2026-50397",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50397"
},
{
"name": "CVE-2026-50423",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50423"
},
{
"name": "CVE-2026-54127",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54127"
},
{
"name": "CVE-2026-49173",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-49173"
},
{
"name": "CVE-2026-50377",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50377"
},
{
"name": "CVE-2026-50373",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50373"
},
{
"name": "CVE-2026-50322",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50322"
},
{
"name": "CVE-2026-50475",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50475"
},
{
"name": "CVE-2026-56643",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56643"
},
{
"name": "CVE-2026-49795",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-49795"
},
{
"name": "CVE-2026-50355",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50355"
},
{
"name": "CVE-2026-50369",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50369"
},
{
"name": "CVE-2026-50509",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50509"
},
{
"name": "CVE-2026-49793",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-49793"
},
{
"name": "CVE-2026-49783",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-49783"
},
{
"name": "CVE-2026-54997",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54997"
},
{
"name": "CVE-2026-50426",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50426"
},
{
"name": "CVE-2026-50458",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50458"
},
{
"name": "CVE-2026-50445",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50445"
},
{
"name": "CVE-2026-34348",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34348"
},
{
"name": "CVE-2026-50392",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50392"
},
{
"name": "CVE-2026-50482",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50482"
},
{
"name": "CVE-2026-49790",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-49790"
},
{
"name": "CVE-2026-58633",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58633"
},
{
"name": "CVE-2026-50327",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50327"
},
{
"name": "CVE-2026-34328",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34328"
},
{
"name": "CVE-2026-56644",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56644"
},
{
"name": "CVE-2026-49792",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-49792"
},
{
"name": "CVE-2026-49171",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-49171"
},
{
"name": "CVE-2026-56649",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56649"
},
{
"name": "CVE-2026-50370",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50370"
},
{
"name": "CVE-2026-56194",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56194"
},
{
"name": "CVE-2026-50495",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50495"
},
{
"name": "CVE-2026-54109",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54109"
},
{
"name": "CVE-2026-50677",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50677"
},
{
"name": "CVE-2026-58526",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58526"
},
{
"name": "CVE-2026-58546",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58546"
},
{
"name": "CVE-2026-54991",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54991"
},
{
"name": "CVE-2026-50326",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50326"
},
{
"name": "CVE-2026-57968",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-57968"
},
{
"name": "CVE-2026-50357",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50357"
},
{
"name": "CVE-2026-56650",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56650"
},
{
"name": "CVE-2026-50680",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50680"
},
{
"name": "CVE-2026-54129",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54129"
},
{
"name": "CVE-2026-58539",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58539"
},
{
"name": "CVE-2026-57093",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-57093"
},
{
"name": "CVE-2026-50400",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50400"
},
{
"name": "CVE-2026-49169",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-49169"
},
{
"name": "CVE-2026-54107",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54107"
},
{
"name": "CVE-2026-58537",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58537"
},
{
"name": "CVE-2026-56187",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56187"
},
{
"name": "CVE-2026-42900",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42900"
},
{
"name": "CVE-2026-58527",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58527"
},
{
"name": "CVE-2026-50323",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50323"
},
{
"name": "CVE-2026-54112",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54112"
},
{
"name": "CVE-2026-50673",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50673"
},
{
"name": "CVE-2026-50500",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50500"
},
{
"name": "CVE-2026-50413",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50413"
},
{
"name": "CVE-2026-50429",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50429"
},
{
"name": "CVE-2026-50441",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50441"
},
{
"name": "CVE-2026-58531",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58531"
},
{
"name": "CVE-2026-50462",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50462"
},
{
"name": "CVE-2026-50352",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50352"
},
{
"name": "CVE-2026-55014",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55014"
},
{
"name": "CVE-2026-56647",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56647"
},
{
"name": "CVE-2026-50473",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50473"
},
{
"name": "CVE-2026-49805",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-49805"
},
{
"name": "CVE-2026-50669",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50669"
},
{
"name": "CVE-2026-50469",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50469"
},
{
"name": "CVE-2026-58614",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58614"
},
{
"name": "CVE-2026-50306",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50306"
},
{
"name": "CVE-2026-50382",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50382"
},
{
"name": "CVE-2026-50526",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50526"
},
{
"name": "CVE-2026-54115",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54115"
},
{
"name": "CVE-2026-49178",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-49178"
},
{
"name": "CVE-2026-56176",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56176"
},
{
"name": "CVE-2026-50501",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50501"
},
{
"name": "CVE-2026-50368",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50368"
},
{
"name": "CVE-2026-50313",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50313"
},
{
"name": "CVE-2026-57095",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-57095"
},
{
"name": "CVE-2026-50296",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50296"
},
{
"name": "CVE-2026-50422",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50422"
},
{
"name": "CVE-2026-50325",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50325"
},
{
"name": "CVE-2026-50398",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50398"
},
{
"name": "CVE-2026-50339",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50339"
},
{
"name": "CVE-2026-50444",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50444"
},
{
"name": "CVE-2026-58543",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58543"
},
{
"name": "CVE-2026-50670",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50670"
},
{
"name": "CVE-2026-50307",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50307"
},
{
"name": "CVE-2026-50390",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50390"
},
{
"name": "CVE-2026-50477",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50477"
},
{
"name": "CVE-2026-40378",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-40378"
},
{
"name": "CVE-2026-50375",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50375"
},
{
"name": "CVE-2026-50304",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50304"
},
{
"name": "CVE-2026-50518",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50518"
},
{
"name": "CVE-2026-50487",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50487"
},
{
"name": "CVE-2026-56173",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56173"
},
{
"name": "CVE-2026-50399",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50399"
},
{
"name": "CVE-2026-58629",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58629"
},
{
"name": "CVE-2026-50384",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50384"
},
{
"name": "CVE-2026-50358",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50358"
},
{
"name": "CVE-2026-50374",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50374"
},
{
"name": "CVE-2026-50453",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50453"
},
{
"name": "CVE-2026-50647",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50647"
},
{
"name": "CVE-2026-50461",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50461"
},
{
"name": "CVE-2026-50341",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50341"
},
{
"name": "CVE-2026-50294",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50294"
},
{
"name": "CVE-2026-58638",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58638"
},
{
"name": "CVE-2026-50460",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50460"
},
{
"name": "CVE-2026-50351",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50351"
},
{
"name": "CVE-2026-50347",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50347"
},
{
"name": "CVE-2026-50685",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50685"
},
{
"name": "CVE-2026-56181",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56181"
},
{
"name": "CVE-2026-50388",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50388"
},
{
"name": "CVE-2026-54128",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54128"
},
{
"name": "CVE-2026-50410",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50410"
},
{
"name": "CVE-2026-50411",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50411"
},
{
"name": "CVE-2026-50379",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50379"
},
{
"name": "CVE-2026-34346",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34346"
},
{
"name": "CVE-2026-49170",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-49170"
},
{
"name": "CVE-2026-50414",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50414"
},
{
"name": "CVE-2026-58542",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58542"
},
{
"name": "CVE-2026-56182",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56182"
},
{
"name": "CVE-2026-58530",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58530"
},
{
"name": "CVE-2026-58610",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58610"
},
{
"name": "CVE-2026-58626",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58626"
},
{
"name": "CVE-2026-49167",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-49167"
},
{
"name": "CVE-2026-50330",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50330"
},
{
"name": "CVE-2026-58594",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58594"
},
{
"name": "CVE-2026-50676",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50676"
},
{
"name": "CVE-2026-50417",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50417"
},
{
"name": "CVE-2026-57982",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-57982"
},
{
"name": "CVE-2026-49803",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-49803"
},
{
"name": "CVE-2026-49180",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-49180"
},
{
"name": "CVE-2026-50684",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50684"
},
{
"name": "CVE-2026-49797",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-49797"
},
{
"name": "CVE-2026-49806",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-49806"
},
{
"name": "CVE-2026-50667",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50667"
},
{
"name": "CVE-2026-50340",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50340"
},
{
"name": "CVE-2026-50681",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50681"
},
{
"name": "CVE-2026-50484",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50484"
},
{
"name": "CVE-2026-50300",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50300"
},
{
"name": "CVE-2026-50360",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50360"
},
{
"name": "CVE-2026-50434",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50434"
},
{
"name": "CVE-2026-58544",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58544"
},
{
"name": "CVE-2026-50416",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50416"
},
{
"name": "CVE-2026-56197",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56197"
},
{
"name": "CVE-2026-47303",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47303"
},
{
"name": "CVE-2026-50494",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50494"
},
{
"name": "CVE-2026-50403",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50403"
},
{
"name": "CVE-2026-50661",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50661"
},
{
"name": "CVE-2026-50316",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50316"
},
{
"name": "CVE-2026-50492",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50492"
},
{
"name": "CVE-2026-50418",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50418"
},
{
"name": "CVE-2026-50354",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50354"
},
{
"name": "CVE-2026-50356",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50356"
},
{
"name": "CVE-2026-50332",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50332"
},
{
"name": "CVE-2026-50337",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50337"
},
{
"name": "CVE-2026-49796",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-49796"
},
{
"name": "CVE-2026-58538",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58538"
},
{
"name": "CVE-2026-57097",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-57097"
},
{
"name": "CVE-2026-50686",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50686"
},
{
"name": "CVE-2026-50420",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50420"
},
{
"name": "CVE-2026-50333",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50333"
},
{
"name": "CVE-2026-58608",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58608"
},
{
"name": "CVE-2026-50471",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50471"
},
{
"name": "CVE-2026-56184",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56184"
},
{
"name": "CVE-2026-50454",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50454"
},
{
"name": "CVE-2026-49175",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-49175"
},
{
"name": "CVE-2026-50650",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50650"
},
{
"name": "CVE-2026-50485",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50485"
},
{
"name": "CVE-2026-50365",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50365"
},
{
"name": "CVE-2026-49162",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-49162"
},
{
"name": "CVE-2026-50396",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50396"
},
{
"name": "CVE-2026-54114",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54114"
},
{
"name": "CVE-2026-50331",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50331"
},
{
"name": "CVE-2026-50668",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50668"
},
{
"name": "CVE-2026-48564",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48564"
},
{
"name": "CVE-2026-50674",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50674"
},
{
"name": "CVE-2026-50435",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50435"
},
{
"name": "CVE-2026-50363",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50363"
},
{
"name": "CVE-2026-57085",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-57085"
},
{
"name": "CVE-2026-58529",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58529"
},
{
"name": "CVE-2026-49184",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-49184"
},
{
"name": "CVE-2026-50503",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50503"
},
{
"name": "CVE-2026-50348",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50348"
},
{
"name": "CVE-2026-58613",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58613"
},
{
"name": "CVE-2026-41087",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-41087"
},
{
"name": "CVE-2026-50505",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50505"
},
{
"name": "CVE-2026-54111",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54111"
},
{
"name": "CVE-2026-50452",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50452"
},
{
"name": "CVE-2026-50335",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50335"
},
{
"name": "CVE-2026-57091",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-57091"
},
{
"name": "CVE-2026-50433",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50433"
},
{
"name": "CVE-2026-57092",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-57092"
},
{
"name": "CVE-2026-42975",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42975"
},
{
"name": "CVE-2026-50483",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50483"
},
{
"name": "CVE-2026-54995",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54995"
},
{
"name": "CVE-2026-56175",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56175"
},
{
"name": "CVE-2026-34349",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34349"
},
{
"name": "CVE-2026-50430",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50430"
},
{
"name": "CVE-2026-50527",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50527"
},
{
"name": "CVE-2026-50412",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50412"
},
{
"name": "CVE-2026-58535",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58535"
},
{
"name": "CVE-2026-50479",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50479"
},
{
"name": "CVE-2026-50394",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50394"
},
{
"name": "CVE-2026-57084",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-57084"
},
{
"name": "CVE-2026-50293",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50293"
},
{
"name": "CVE-2026-50343",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50343"
},
{
"name": "CVE-2026-54124",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54124"
},
{
"name": "CVE-2026-56189",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56189"
},
{
"name": "CVE-2026-58533",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58533"
},
{
"name": "CVE-2026-58601",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58601"
},
{
"name": "CVE-2026-55004",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55004"
},
{
"name": "CVE-2026-50459",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50459"
},
{
"name": "CVE-2026-50457",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50457"
},
{
"name": "CVE-2026-50308",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50308"
},
{
"name": "CVE-2026-49166",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-49166"
},
{
"name": "CVE-2026-54999",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54999"
},
{
"name": "CVE-2026-50421",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50421"
},
{
"name": "CVE-2026-50346",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50346"
},
{
"name": "CVE-2026-50419",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50419"
},
{
"name": "CVE-2026-55000",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55000"
},
{
"name": "CVE-2026-50689",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50689"
},
{
"name": "CVE-2026-50378",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50378"
},
{
"name": "CVE-2026-50499",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50499"
},
{
"name": "CVE-2026-50391",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50391"
},
{
"name": "CVE-2026-42990",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42990"
},
{
"name": "CVE-2026-57094",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-57094"
},
{
"name": "CVE-2026-50298",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50298"
},
{
"name": "CVE-2026-50342",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50342"
},
{
"name": "CVE-2026-50334",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50334"
},
{
"name": "CVE-2026-58631",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58631"
},
{
"name": "CVE-2026-50525",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50525"
},
{
"name": "CVE-2026-48581",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48581"
},
{
"name": "CVE-2026-50488",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50488"
},
{
"name": "CVE-2026-42982",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42982"
},
{
"name": "CVE-2026-50486",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50486"
},
{
"name": "CVE-2026-44800",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44800"
},
{
"name": "CVE-2026-58634",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58634"
},
{
"name": "CVE-2026-50466",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50466"
},
{
"name": "CVE-2026-48572",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48572"
},
{
"name": "CVE-2026-49168",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-49168"
},
{
"name": "CVE-2026-50450",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50450"
},
{
"name": "CVE-2026-50353",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50353"
},
{
"name": "CVE-2026-58637",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58637"
},
{
"name": "CVE-2026-50299",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50299"
},
{
"name": "CVE-2026-50312",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50312"
},
{
"name": "CVE-2026-58540",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58540"
},
{
"name": "CVE-2026-58541",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58541"
},
{
"name": "CVE-2026-49800",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-49800"
},
{
"name": "CVE-2026-49172",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-49172"
},
{
"name": "CVE-2026-56648",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56648"
},
{
"name": "CVE-2026-57083",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-57083"
},
{
"name": "CVE-2026-50470",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50470"
},
{
"name": "CVE-2026-49784",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-49784"
},
{
"name": "CVE-2026-58609",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58609"
},
{
"name": "CVE-2026-57088",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-57088"
},
{
"name": "CVE-2026-50350",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50350"
},
{
"name": "CVE-2026-50361",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50361"
},
{
"name": "CVE-2026-50309",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50309"
},
{
"name": "CVE-2026-50436",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50436"
},
{
"name": "CVE-2026-50498",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50498"
},
{
"name": "CVE-2026-57979",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-57979"
},
{
"name": "CVE-2026-49791",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-49791"
},
{
"name": "CVE-2026-54125",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54125"
},
{
"name": "CVE-2026-50401",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50401"
},
{
"name": "CVE-2026-50302",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50302"
},
{
"name": "CVE-2026-33842",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33842"
},
{
"name": "CVE-2026-50528",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50528"
},
{
"name": "CVE-2026-50502",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50502"
},
{
"name": "CVE-2026-49181",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-49181"
},
{
"name": "CVE-2026-50389",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50389"
},
{
"name": "CVE-2026-49788",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-49788"
},
{
"name": "CVE-2026-50297",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50297"
},
{
"name": "CVE-2026-50695",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50695"
},
{
"name": "CVE-2026-54121",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54121"
},
{
"name": "CVE-2026-49807",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-49807"
},
{
"name": "CVE-2026-49802",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-49802"
},
{
"name": "CVE-2026-50311",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50311"
},
{
"name": "CVE-2026-54119",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54119"
},
{
"name": "CVE-2026-50383",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50383"
},
{
"name": "CVE-2026-50372",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50372"
},
{
"name": "CVE-2026-50497",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50497"
},
{
"name": "CVE-2026-50478",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50478"
},
{
"name": "CVE-2026-50465",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50465"
},
{
"name": "CVE-2026-58635",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58635"
},
{
"name": "CVE-2026-49789",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-49789"
},
{
"name": "CVE-2026-44806",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44806"
},
{
"name": "CVE-2026-54982",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54982"
},
{
"name": "CVE-2026-58628",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58628"
},
{
"name": "CVE-2026-50692",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50692"
},
{
"name": "CVE-2026-50447",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50447"
},
{
"name": "CVE-2026-56168",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56168"
},
{
"name": "CVE-2026-50427",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50427"
},
{
"name": "CVE-2026-50448",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50448"
},
{
"name": "CVE-2026-49804",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-49804"
},
{
"name": "CVE-2026-48571",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48571"
},
{
"name": "CVE-2026-49801",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-49801"
},
{
"name": "CVE-2026-57107",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-57107"
},
{
"name": "CVE-2026-57096",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-57096"
},
{
"name": "CVE-2026-47302",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47302"
},
{
"name": "CVE-2026-58619",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58619"
},
{
"name": "CVE-2026-58532",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58532"
},
{
"name": "CVE-2026-50646",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50646"
},
{
"name": "CVE-2026-50648",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50648"
},
{
"name": "CVE-2026-57090",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-57090"
},
{
"name": "CVE-2026-56169",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56169"
},
{
"name": "CVE-2026-56170",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56170"
},
{
"name": "CVE-2026-50463",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50463"
},
{
"name": "CVE-2026-54996",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54996"
},
{
"name": "CVE-2026-50456",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50456"
},
{
"name": "CVE-2026-50476",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50476"
},
{
"name": "CVE-2026-58632",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58632"
},
{
"name": "CVE-2026-56183",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56183"
},
{
"name": "CVE-2026-50381",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50381"
},
{
"name": "CVE-2026-50407",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50407"
},
{
"name": "CVE-2026-50310",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50310"
},
{
"name": "CVE-2026-49177",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-49177"
},
{
"name": "CVE-2026-50490",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50490"
},
{
"name": "CVE-2026-40400",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-40400"
},
{
"name": "CVE-2026-54122",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54122"
},
{
"name": "CVE-2026-50491",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50491"
},
{
"name": "CVE-2026-56196",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56196"
},
{
"name": "CVE-2026-50318",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50318"
},
{
"name": "CVE-2026-50679",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50679"
},
{
"name": "CVE-2026-50440",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50440"
},
{
"name": "CVE-2026-50409",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50409"
},
{
"name": "CVE-2026-50683",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50683"
},
{
"name": "CVE-2026-56155",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56155"
},
{
"name": "CVE-2026-50480",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50480"
},
{
"name": "CVE-2026-50405",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50405"
},
{
"name": "CVE-2026-50666",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50666"
},
{
"name": "CVE-2026-50496",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50496"
},
{
"name": "CVE-2026-50406",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50406"
},
{
"name": "CVE-2026-50317",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50317"
},
{
"name": "CVE-2026-40422",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-40422"
},
{
"name": "CVE-2026-50687",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50687"
},
{
"name": "CVE-2026-50387",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50387"
},
{
"name": "CVE-2026-56185",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56185"
},
{
"name": "CVE-2026-50386",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50386"
},
{
"name": "CVE-2026-57089",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-57089"
},
{
"name": "CVE-2026-50380",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50380"
},
{
"name": "CVE-2026-55001",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55001"
},
{
"name": "CVE-2026-54986",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54986"
},
{
"name": "CVE-2026-50659",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50659"
},
{
"name": "CVE-2026-55003",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55003"
},
{
"name": "CVE-2026-47300",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47300"
},
{
"name": "CVE-2026-57108",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-57108"
},
{
"name": "CVE-2026-50655",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50655"
},
{
"name": "CVE-2026-55144",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55144"
},
{
"name": "CVE-2026-56159",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56159"
},
{
"name": "CVE-2026-50362",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50362"
},
{
"name": "CVE-2026-50449",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50449"
},
{
"name": "CVE-2026-56186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56186"
},
{
"name": "CVE-2026-49183",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-49183"
},
{
"name": "CVE-2026-50324",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50324"
},
{
"name": "CVE-2026-50295",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50295"
},
{
"name": "CVE-2026-50367",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50367"
},
{
"name": "CVE-2026-57976",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-57976"
},
{
"name": "CVE-2026-50366",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50366"
},
{
"name": "CVE-2026-50451",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50451"
},
{
"name": "CVE-2026-58536",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58536"
},
{
"name": "CVE-2026-50345",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50345"
},
{
"name": "CVE-2026-50474",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50474"
},
{
"name": "CVE-2026-58640",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58640"
},
{
"name": "CVE-2026-50432",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50432"
},
{
"name": "CVE-2026-49794",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-49794"
},
{
"name": "CVE-2026-50376",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50376"
},
{
"name": "CVE-2026-50428",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50428"
},
{
"name": "CVE-2026-49164",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-49164"
},
{
"name": "CVE-2026-50651",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50651"
},
{
"name": "CVE-2026-58627",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58627"
},
{
"name": "CVE-2026-50442",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50442"
},
{
"name": "CVE-2026-58528",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58528"
},
{
"name": "CVE-2026-54989",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54989"
},
{
"name": "CVE-2026-50344",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50344"
},
{
"name": "CVE-2026-50305",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50305"
},
{
"name": "CVE-2026-54132",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54132"
},
{
"name": "CVE-2026-54990",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54990"
},
{
"name": "CVE-2026-50315",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50315"
},
{
"name": "CVE-2026-50688",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50688"
},
{
"name": "CVE-2026-50455",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50455"
},
{
"name": "CVE-2026-50682",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50682"
},
{
"name": "CVE-2026-49808",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-49808"
},
{
"name": "CVE-2026-49174",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-49174"
},
{
"name": "CVE-2026-50424",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50424"
},
{
"name": "CVE-2026-50694",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50694"
},
{
"name": "CVE-2026-58602",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58602"
},
{
"name": "CVE-2026-50303",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50303"
},
{
"name": "CVE-2026-50649",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50649"
},
{
"name": "CVE-2026-50696",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50696"
},
{
"name": "CVE-2026-50697",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50697"
},
{
"name": "CVE-2026-54983",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54983"
},
{
"name": "CVE-2026-49787",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-49787"
},
{
"name": "CVE-2026-50371",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50371"
},
{
"name": "CVE-2026-49799",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-49799"
},
{
"name": "CVE-2026-54987",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54987"
},
{
"name": "CVE-2026-50672",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50672"
},
{
"name": "CVE-2026-54126",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54126"
},
{
"name": "CVE-2026-57973",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-57973"
},
{
"name": "CVE-2026-50328",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50328"
},
{
"name": "CVE-2026-50321",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50321"
},
{
"name": "CVE-2026-57087",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-57087"
},
{
"name": "CVE-2026-50493",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50493"
},
{
"name": "CVE-2026-50431",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50431"
},
{
"name": "CVE-2026-54992",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54992"
},
{
"name": "CVE-2026-49176",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-49176"
},
{
"name": "CVE-2026-50385",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50385"
}
],
"initial_release_date": "2026-07-15T00:00:00",
"last_revision_date": "2026-07-15T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-0869",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-07-15T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Microsoft Windows. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service \u00e0 distance.\n\nMicrosoft indique que la vuln\u00e9rabilit\u00e9 CVE-2026-56155 est activement exploit\u00e9e.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Microsoft Windows",
"vendor_advisories": [
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-58628",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58628"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-58627",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58627"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-58594",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58594"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-58547",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58547"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-58536",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58536"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-58537",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58537"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-58546",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58546"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-58541",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58541"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-58543",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58543"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-58535",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58535"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-58534",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58534"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-58530",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58530"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-58528",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58528"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-57973",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57973"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-57093",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57093"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-57968",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57968"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-57087",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57087"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-56643",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56643"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-57096",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57096"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-56194",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56194"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-56175",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56175"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-56173",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56173"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-56183",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56183"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-56188",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56188"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-56176",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56176"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-56159",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56159"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-56168",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56168"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50683",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50683"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-54115",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54115"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50672",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50672"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-54126",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54126"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50685",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50685"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50526",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50526"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50673",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50673"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-58626",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58626"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50496",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50496"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50498",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50498"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50490",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50490"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50502",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50502"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50504",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50504"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50494",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50494"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50484",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50484"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50483",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50483"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50493",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50493"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50485",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50485"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50482",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50482"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50495",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50495"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50450",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50450"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50367",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50367"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50431",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50431"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50474",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50474"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50378",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50378"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50355",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50355"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50377",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50377"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50390",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50390"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50461",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50461"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50357",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50357"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50312",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50312"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50313",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50313"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50310",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50310"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50419",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50419"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50309",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50309"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50386",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50386"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50304",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50304"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50306",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50306"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50392",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50392"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50372",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50372"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-57088",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57088"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50363",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50363"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50305",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50305"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50501",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50501"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50491",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50491"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-58527",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58527"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-57982",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57982"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-57091",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57091"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50401",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50401"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50328",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50328"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-57094",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57094"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50646",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50646"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-56649",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56649"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-57084",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57084"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-57090",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57090"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-56650",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56650"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-57095",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57095"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50478",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50478"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50528",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50528"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50477",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50477"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50417",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50417"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50447",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50447"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50406",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50406"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-58531",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58531"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-58544",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58544"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-56647",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56647"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-58542",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58542"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50362",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50362"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-58545",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58545"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-57092",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57092"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50497",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50497"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50429",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50429"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50459",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50459"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50415",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50415"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50394",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50394"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50411",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50411"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50426",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50426"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50427",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50427"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50444",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50444"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50332",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50332"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50413",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50413"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50471",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50471"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50445",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50445"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50437",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50437"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50352",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50352"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50387",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50387"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50334",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50334"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-58532",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58532"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50686",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50686"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50505",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50505"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-57089",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57089"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50324",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50324"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50397",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50397"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50499",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50499"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50475",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50475"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50488",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50488"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50487",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50487"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-58637",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58637"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-58638",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58638"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-58632",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58632"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-58629",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58629"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50344",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50344"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50500",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50500"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50359",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50359"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50380",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50380"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50688",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50688"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50331",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50331"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50684",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50684"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-56197",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56197"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-57108",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57108"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50420",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50420"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50341",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50341"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-56196",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56196"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50458",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50458"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50430",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50430"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50374",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50374"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-58619",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58619"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50687",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50687"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50376",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50376"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50440",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50440"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50432",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50432"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50402",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50402"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50435",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50435"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50399",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50399"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50421",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50421"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50466",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50466"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50400",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50400"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50451",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50451"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50382",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50382"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50391",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50391"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50343",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50343"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50692",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50692"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50321",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50321"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50383",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50383"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-56190",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56190"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50434",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50434"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50365",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50365"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-58540",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58540"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50690",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50690"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50454",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50454"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-58613",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58613"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-57085",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57085"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-56648",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56648"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50469",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50469"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50677",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50677"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50676",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50676"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50369",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50369"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50405",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50405"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50448",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50448"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50525",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50525"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50347",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50347"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50682",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50682"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-58634",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58634"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-58538",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58538"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-58533",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58533"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50518",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50518"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50479",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50479"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50476",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50476"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50486",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50486"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50453",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50453"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50302",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50302"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50455",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50455"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50370",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50370"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-49803",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49803"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50509",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50509"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50489",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50489"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50456",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50456"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50433",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50433"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50492",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50492"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50425",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50425"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50315",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50315"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50396",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50396"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50326",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50326"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50364",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50364"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50356",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50356"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-57083",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57083"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50670",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50670"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50667",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50667"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-54121",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54121"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50442",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50442"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50368",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50368"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50460",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50460"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50330",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50330"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50412",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50412"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50307",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50307"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-42900",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42900"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50329",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50329"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50354",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50354"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50300",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50300"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50316",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50316"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-54124",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54124"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-56644",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56644"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-56186",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56186"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50681",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50681"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50680",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50680"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50655",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50655"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50503",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50503"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50651",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50651"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50669",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50669"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50389",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50389"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50473",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50473"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50648",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50648"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50457",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50457"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50418",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50418"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50439",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50439"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50422",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50422"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50379",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50379"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50463",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50463"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50414",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50414"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50423",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50423"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50398",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50398"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50336",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50336"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50371",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50371"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50449",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50449"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50388",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50388"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50358",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50358"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50428",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50428"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50416",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50416"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50375",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50375"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50366",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50366"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50361",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50361"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50327",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50327"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50335",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50335"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50407",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50407"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50337",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50337"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50325",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50325"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50393",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50393"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50384",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50384"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50350",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50350"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50295",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50295"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50296",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50296"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50293",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50293"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-49808",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49808"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-49807",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49807"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50298",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50298"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50342",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50342"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50297",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50297"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50351",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50351"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50318",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50318"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-49805",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49805"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50323",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50323"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-49806",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49806"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50294",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50294"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50333",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50333"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50311",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50311"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-49794",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49794"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-49798",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49798"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-49178",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49178"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50308",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50308"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-49180",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49180"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-49790",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49790"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-40378",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40378"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-44806",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44806"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-57097",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57097"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-58614",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58614"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50524",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50524"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-54999",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54999"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-54982",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54982"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-54114",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54114"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50381",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50381"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-54107",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54107"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50696",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50696"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50695",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50695"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-54987",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54987"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-54132",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54132"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-49174",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49174"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-54983",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54983"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-49172",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49172"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-49173",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49173"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-49169",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49169"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-49170",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49170"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-49168",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49168"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-49162",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49162"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-49164",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49164"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-58529",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58529"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-56181",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56181"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-56189",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56189"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-56187",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56187"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-56184",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56184"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-47302",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47302"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-54125",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54125"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50689",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50689"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-54128",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54128"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50668",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50668"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50666",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50666"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50674",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50674"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50649",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50649"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50650",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50650"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50659",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50659"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50647",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50647"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50480",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50480"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50465",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50465"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50353",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50353"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50436",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50436"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-54112",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54112"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50373",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50373"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50340",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50340"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50441",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50441"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50317",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50317"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50322",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50322"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50345",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50345"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50348",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50348"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50452",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50452"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-49801",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49801"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-49802",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49802"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-49804",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49804"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-49800",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49800"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50299",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50299"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-49799",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49799"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-49797",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49797"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-49795",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49795"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-49796",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49796"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-49791",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49791"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-49792",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49792"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-49793",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49793"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-49789",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49789"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-49788",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49788"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-49183",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49183"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-49787",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49787"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-49181",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49181"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-49184",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49184"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-48564",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48564"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-48581",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48581"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-34348",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34348"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-41087",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41087"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-33842",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33842"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-58640",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58640"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-40422",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40422"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-34328",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34328"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50409",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50409"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-58608",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58608"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-58610",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58610"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-58526",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58526"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-58602",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58602"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-58601",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58601"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-55014",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55014"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-57979",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57979"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-57976",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57976"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-57107",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57107"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-58609",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58609"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-54127",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54127"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50694",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50694"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-56169",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56169"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-56185",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56185"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-56155",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56155"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-56170",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56170"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-55144",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55144"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-54122",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54122"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-54995",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54995"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-54997",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54997"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-55003",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55003"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-54993",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54993"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-54119",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54119"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-54986",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54986"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-55001",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55001"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-54992",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54992"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-54991",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54991"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-54990",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54990"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-54996",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54996"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-54109",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54109"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-54111",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54111"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-54989",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54989"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50697",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50697"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-54129",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54129"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-49177",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49177"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-58631",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58631"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-49784",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49784"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-48571",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48571"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-48572",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48572"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-49166",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49166"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-42990",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42990"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-42975",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42975"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-34349",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34349"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-47303",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47303"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-42982",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42982"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-34346",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34346"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-49175",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49175"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-49171",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49171"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-47300",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47300"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-49176",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49176"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-49167",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49167"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-49165",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49165"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50470",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50470"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50385",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50385"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50679",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50679"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-56182",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56182"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50527",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50527"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50360",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50360"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50346",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50346"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50424",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50424"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-58539",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58539"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-58633",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58633"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50403",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50403"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50303",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50303"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50410",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50410"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50339",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50339"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-49783",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49783"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-55004",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55004"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50661",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50661"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50462",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50462"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-50404",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50404"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-44800",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44800"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-40400",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40400"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-58635",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58635"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2026-55000",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55000"
}
]
}
CERTFR-2026-AVI-0870
Vulnerability from certfr_avis - Published: 2026-07-15 - Updated: 2026-07-15
De multiples vulnérabilités ont été découvertes dans Microsoft .Net. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Microsoft | .Net | .NET 10.0 installed sur Linux versions antérieures à 10.0.6 | ||
| Microsoft | .Net | Microsoft .NET Framework 3.5 AND 4.8.1 versions antérieures à 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0 | ||
| Microsoft | .Net | .NET 8.0 installed sur Linux versions antérieures à 8.0.29 | ||
| Microsoft | .Net | Microsoft .NET Framework 3.5 AND 4.8 versions antérieures à 2.0.50727.9069 & 3.0.30729.9067 & 4.8.4803.0 | ||
| Microsoft | .Net | Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 versions antérieures à 4.7.4143.0 | ||
| Microsoft | .Net | Microsoft .NET Framework 4.8 versions antérieures à 4.8.4803.0 | ||
| Microsoft | .Net | Microsoft .NET Framework 3.5 AND 4.8.1 versions antérieures à 4.8.9340.0 | ||
| Microsoft | .Net | Microsoft .NET Framework 3.5 AND 4.7.2 versions antérieures à 2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0 | ||
| Microsoft | .Net | .NET 9.0 installed sur Mac OS versions antérieures à 9.0.18 | ||
| Microsoft | .Net | Microsoft .NET Framework 3.5 versions antérieures à 2.0.50727.8983 & 3.0.30729.8978 | ||
| Microsoft | .Net | .NET 8.0 installed sur Mac OS versions antérieures à 8.0.29 | ||
| Microsoft | .Net | Microsoft .NET Framework 3.5 AND 4.8.1 versions antérieures à 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9340.0 | ||
| Microsoft | .Net | .NET 10.0 installed sur Mac OS versions antérieures à 10.0.6 | ||
| Microsoft | .Net | Microsoft .NET Framework 3.5 AND 4.7.2 versions antérieures à 2.0.50727.8983 & 3.0.30729.8978 & 4.7.4143.0 | ||
| Microsoft | .Net | .NET 9.0 installed sur Linux versions antérieures à 9.0.18 | ||
| Microsoft | .Net | Microsoft .NET Framework 3.5 AND 4.8 versions antérieures à 2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0 |
References
| Title | Publication Time | Tags | |||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||||||||||||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": ".NET 10.0 installed sur Linux versions ant\u00e9rieures \u00e0 10.0.6",
"product": {
"name": ".Net",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft .NET Framework 3.5 AND 4.8.1 versions ant\u00e9rieures \u00e0 2.0.50727.9182 \u0026 3.0.30729.9168 \u0026 4.8.9339.0",
"product": {
"name": ".Net",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": ".NET 8.0 installed sur Linux versions ant\u00e9rieures \u00e0 8.0.29",
"product": {
"name": ".Net",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft .NET Framework 3.5 AND 4.8 versions ant\u00e9rieures \u00e0 2.0.50727.9069 \u0026 3.0.30729.9067 \u0026 4.8.4803.0",
"product": {
"name": ".Net",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 versions ant\u00e9rieures \u00e0 4.7.4143.0",
"product": {
"name": ".Net",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft .NET Framework 4.8 versions ant\u00e9rieures \u00e0 4.8.4803.0",
"product": {
"name": ".Net",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft .NET Framework 3.5 AND 4.8.1 versions ant\u00e9rieures \u00e0 4.8.9340.0",
"product": {
"name": ".Net",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft .NET Framework 3.5 AND 4.7.2 versions ant\u00e9rieures \u00e0 2.0.50727.9069 \u0026 3.0.30729.9067 \u0026 4.7.4143.0",
"product": {
"name": ".Net",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": ".NET 9.0 installed sur Mac OS versions ant\u00e9rieures \u00e0 9.0.18",
"product": {
"name": ".Net",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft .NET Framework 3.5 versions ant\u00e9rieures \u00e0 2.0.50727.8983 \u0026 3.0.30729.8978",
"product": {
"name": ".Net",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": ".NET 8.0 installed sur Mac OS versions ant\u00e9rieures \u00e0 8.0.29",
"product": {
"name": ".Net",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft .NET Framework 3.5 AND 4.8.1 versions ant\u00e9rieures \u00e0 2.0.50727.9182 \u0026 3.0.30729.9168 \u0026 4.8.9340.0",
"product": {
"name": ".Net",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": ".NET 10.0 installed sur Mac OS versions ant\u00e9rieures \u00e0 10.0.6",
"product": {
"name": ".Net",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft .NET Framework 3.5 AND 4.7.2 versions ant\u00e9rieures \u00e0 2.0.50727.8983 \u0026 3.0.30729.8978 \u0026 4.7.4143.0",
"product": {
"name": ".Net",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": ".NET 9.0 installed sur Linux versions ant\u00e9rieures \u00e0 9.0.18",
"product": {
"name": ".Net",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft .NET Framework 3.5 AND 4.8 versions ant\u00e9rieures \u00e0 2.0.50727.9182 \u0026 3.0.30729.9168 \u0026 4.8.4803.0",
"product": {
"name": ".Net",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-50524",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50524"
},
{
"name": "CVE-2026-50526",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50526"
},
{
"name": "CVE-2026-47303",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47303"
},
{
"name": "CVE-2026-50650",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50650"
},
{
"name": "CVE-2026-50527",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50527"
},
{
"name": "CVE-2026-50525",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50525"
},
{
"name": "CVE-2026-50528",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50528"
},
{
"name": "CVE-2026-47302",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47302"
},
{
"name": "CVE-2026-50646",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50646"
},
{
"name": "CVE-2026-50648",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50648"
},
{
"name": "CVE-2026-56170",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56170"
},
{
"name": "CVE-2026-50659",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50659"
},
{
"name": "CVE-2026-47300",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47300"
},
{
"name": "CVE-2026-57108",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-57108"
},
{
"name": "CVE-2026-50651",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50651"
}
],
"initial_release_date": "2026-07-15T00:00:00",
"last_revision_date": "2026-07-15T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-0870",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-07-15T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Microsoft .Net. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service \u00e0 distance.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Microsoft .Net",
"vendor_advisories": [
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft .Net CVE-2026-50527",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50527"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft .Net CVE-2026-50528",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50528"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft .Net CVE-2026-50648",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50648"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft .Net CVE-2026-47300",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47300"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft .Net CVE-2026-50650",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50650"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft .Net CVE-2026-50651",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50651"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft .Net CVE-2026-56170",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56170"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft .Net CVE-2026-50525",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50525"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft .Net CVE-2026-50659",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50659"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft .Net CVE-2026-47302",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47302"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft .Net CVE-2026-47303",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47303"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft .Net CVE-2026-57108",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57108"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft .Net CVE-2026-50646",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50646"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft .Net CVE-2026-50526",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50526"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft .Net CVE-2026-50524",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50524"
}
]
}
CERTFR-2026-AVI-0872
Vulnerability from certfr_avis - Published: 2026-07-15 - Updated: 2026-07-15
De multiples vulnérabilités ont été découvertes dans les produits Microsoft. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.
Microsoft indique que la vulnérabilité CVE-2026-56164 est activement exploitée.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Microsoft | N/A | Microsoft.AspNet.OData versions antérieures à 7.8.0 | ||
| Microsoft | N/A | Microsoft Copilot | ||
| Microsoft | N/A | Surface Laptop 4 with Intel Processor | ||
| Microsoft | N/A | Microsoft SQL Server 2017 pour systèmes x64 (CU 31) versions antérieures à 14.0.3540.1 | ||
| Microsoft | N/A | Visual Studio Code versions antérieures à 1.128.1 | ||
| Microsoft | N/A | Microsoft SQL Server 2017 pour systèmes x64 (GDR) versions antérieures à 14.0.2120.1 | ||
| Microsoft | N/A | Microsoft Dynamics NAV 2018 versions antérieures à 11.0.50704.0 | ||
| Microsoft | N/A | Microsoft Surface Laptop Go 3 | ||
| Microsoft | N/A | Microsoft SharePoint Server 2019 versions antérieures à 16.0.10417.20153 | ||
| Microsoft | N/A | Microsoft Configuration Manager 2509 versions antérieures à 2509 | ||
| Microsoft | N/A | Microsoft SharePoint Server 2019 versions antérieures à 16.0.10417.20175 | ||
| Microsoft | N/A | Microsoft SharePoint Server Subscription Edition versions antérieures à 16.0.19725.20434 | ||
| Microsoft | N/A | Microsoft Surface Pro 7+ | ||
| Microsoft | N/A | Microsoft Exchange Server 2019 Cumulative Update 15 versions antérieures à 15.02.1748.048 | ||
| Microsoft | N/A | Microsoft SharePoint Enterprise Server 2016 versions antérieures à 16.0.5561.1001 | ||
| Microsoft | N/A | Surface Laptop 4 with AMD Processor | ||
| Microsoft | N/A | Power BI Report Server versions antérieures à 15.0.1121.120 | ||
| Microsoft | N/A | Microsoft Visual Studio 2026 version 18.7 antérieures à 18.7.4 | ||
| Microsoft | N/A | Microsoft Visual Studio 2022 version 17.14 antérieures à 17.14.36 | ||
| Microsoft | N/A | Microsoft SharePoint Enterprise Server 2016 versions antérieures à 16.0.5556.1005 | ||
| Microsoft | N/A | Fabric Data Warehouse versions antérieures à 8.0.206.113 | ||
| Microsoft | N/A | Microsoft Configuration Manager 2503 versions antérieures à 2503 | ||
| Microsoft | N/A | Microsoft SQL Server 2019 pour systèmes x64 (CU 32) versions antérieures à 15.0.4480.2 | ||
| Microsoft | N/A | Microsoft Malware Protection Engine versions antérieures à 1.1.26060.3008 | ||
| Microsoft | N/A | Microsoft Bing Search pour iOS versions antérieures à 33.4.440529002 | ||
| Microsoft | N/A | Microsoft SQL Server 2022 pour systèmes x64 (GDR) versions antérieures à 16.0.1190.2 | ||
| Microsoft | N/A | Microsoft Surface Hub 3 | ||
| Microsoft | N/A | Microsoft SQL Server 2016 pour systèmes x64 Service Pack 3 Azure Connect Feature Pack versions antérieures à 13.0.7095.1 | ||
| Microsoft | N/A | Microsoft Surface Go 2 | ||
| Microsoft | N/A | Microsoft Surface Hub | ||
| Microsoft | N/A | Microsoft PC Manager versions antérieures à 3.21.6.0 | ||
| Microsoft | N/A | Microsoft Surface Go 3 | ||
| Microsoft | N/A | Microsoft Configuration Manager 2603 versions antérieures à 2603 | ||
| Microsoft | N/A | Microsoft.AspNetCore.OData versions antérieures à 9.5.0[SX1] | ||
| Microsoft | N/A | Microsoft SharePoint Server Subscription Edition versions antérieures à 16.0.19725.20384 | ||
| Microsoft | N/A | Microsoft Surface Hub 2S | ||
| Microsoft | N/A | GitHub Copilot Plugin pour JetBrains IDEs versions antérieures à 1.13.0-251 | ||
| Microsoft | N/A | Microsoft SQL Server 2016 pour systèmes x64 Service Pack 3 (GDR) versions antérieures à 13.0.6500.1 | ||
| Microsoft | N/A | Microsoft Exchange Server 2019 Cumulative Update 14 versions antérieures à 15.02.1544.043 | ||
| Microsoft | N/A | Microsoft Surface Pro 8 | ||
| Microsoft | N/A | Microsoft SQL Server 2022 pour systèmes x64 (CU 25) versions antérieures à 16.0.4262.2 | ||
| Microsoft | N/A | Microsoft PC Manager versions antérieures à 3.22.1.0 | ||
| Microsoft | N/A | Microsoft Surface Laptop Go | ||
| Microsoft | N/A | Microsoft Defender pour Endpoint pour Mac versions antérieures à 101.26042.0020 | ||
| Microsoft | N/A | Microsoft Visual Studio 2022 version 17.12 antérieures à 17.12.22 | ||
| Microsoft | N/A | Microsoft SQL Server 2019 pour systèmes x64 (GDR) versions antérieures à 15.0.2180.2 | ||
| Microsoft | N/A | Microsoft Exchange Server 2016 Cumulative Update 23 versions antérieures à 15.01.2507.071 | ||
| Microsoft | N/A | Microsoft SQL Server 2025 pour systèmes x64 (CU6) versions antérieures à 17.0.4060.2 | ||
| Microsoft | N/A | Microsoft Surface Laptop Go 2 | ||
| Microsoft | N/A | Microsoft SQL Server 2025 pour systèmes x64 (GDR) versions antérieures à 17.0.1125.2 | ||
| Microsoft | N/A | Age of Empires II: Definitive Edition Game versions antérieures à 101.103.46651.0 | ||
| Microsoft | N/A | Microsoft Exchange Server Subscription Edition RTM versions antérieures à 15.02.2562.045 |
References
| Title | Publication Time | Tags | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Microsoft.AspNet.OData versions ant\u00e9rieures \u00e0 7.8.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Copilot",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Surface Laptop 4 with Intel Processor",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SQL Server 2017 pour syst\u00e8mes x64 (CU 31) versions ant\u00e9rieures \u00e0 14.0.3540.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Visual Studio Code versions ant\u00e9rieures \u00e0 1.128.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SQL Server 2017 pour syst\u00e8mes x64 (GDR) versions ant\u00e9rieures \u00e0 14.0.2120.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Dynamics NAV 2018 versions ant\u00e9rieures \u00e0 11.0.50704.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Surface Laptop Go 3",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SharePoint Server 2019 versions ant\u00e9rieures \u00e0 16.0.10417.20153",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Configuration Manager 2509 versions ant\u00e9rieures \u00e0 2509",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SharePoint Server 2019 versions ant\u00e9rieures \u00e0 16.0.10417.20175",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SharePoint Server Subscription Edition versions ant\u00e9rieures \u00e0 16.0.19725.20434",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Surface Pro 7+",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Exchange Server 2019 Cumulative Update 15 versions ant\u00e9rieures \u00e0 15.02.1748.048",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SharePoint Enterprise Server 2016 versions ant\u00e9rieures \u00e0 16.0.5561.1001",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Surface Laptop 4 with AMD Processor",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Power BI Report Server versions ant\u00e9rieures \u00e0 15.0.1121.120",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Visual Studio 2026 version 18.7 ant\u00e9rieures \u00e0 18.7.4",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Visual Studio 2022 version 17.14 ant\u00e9rieures \u00e0 17.14.36",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SharePoint Enterprise Server 2016 versions ant\u00e9rieures \u00e0 16.0.5556.1005",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Fabric Data Warehouse versions ant\u00e9rieures \u00e0 8.0.206.113",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Configuration Manager 2503 versions ant\u00e9rieures \u00e0 2503",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SQL Server 2019 pour syst\u00e8mes x64 (CU 32) versions ant\u00e9rieures \u00e0 15.0.4480.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Malware Protection Engine versions ant\u00e9rieures \u00e0 1.1.26060.3008",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Bing Search pour iOS versions ant\u00e9rieures \u00e0 33.4.440529002",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SQL Server 2022 pour syst\u00e8mes x64 (GDR) versions ant\u00e9rieures \u00e0 16.0.1190.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Surface Hub 3",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SQL Server 2016 pour syst\u00e8mes x64 Service Pack 3 Azure Connect Feature Pack versions ant\u00e9rieures \u00e0 13.0.7095.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Surface Go 2",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Surface Hub",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft PC Manager versions ant\u00e9rieures \u00e0 3.21.6.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Surface Go 3",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Configuration Manager 2603 versions ant\u00e9rieures \u00e0 2603",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft.AspNetCore.OData versions ant\u00e9rieures \u00e0 9.5.0[SX1]",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SharePoint Server Subscription Edition versions ant\u00e9rieures \u00e0 16.0.19725.20384",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Surface Hub 2S",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "GitHub Copilot Plugin pour JetBrains IDEs versions ant\u00e9rieures \u00e0 1.13.0-251",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SQL Server 2016 pour syst\u00e8mes x64 Service Pack 3 (GDR) versions ant\u00e9rieures \u00e0 13.0.6500.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Exchange Server 2019 Cumulative Update 14 versions ant\u00e9rieures \u00e0 15.02.1544.043",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Surface Pro 8",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SQL Server 2022 pour syst\u00e8mes x64 (CU 25) versions ant\u00e9rieures \u00e0 16.0.4262.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft PC Manager versions ant\u00e9rieures \u00e0 3.22.1.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Surface Laptop Go",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Defender pour Endpoint pour Mac versions ant\u00e9rieures \u00e0 101.26042.0020",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Visual Studio 2022 version 17.12 ant\u00e9rieures \u00e0 17.12.22",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SQL Server 2019 pour syst\u00e8mes x64 (GDR) versions ant\u00e9rieures \u00e0 15.0.2180.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Exchange Server 2016 Cumulative Update 23 versions ant\u00e9rieures \u00e0 15.01.2507.071",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SQL Server 2025 pour syst\u00e8mes x64 (CU6) versions ant\u00e9rieures \u00e0 17.0.4060.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Surface Laptop Go 2",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SQL Server 2025 pour syst\u00e8mes x64 (GDR) versions ant\u00e9rieures \u00e0 17.0.1125.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Age of Empires II: Definitive Edition Game versions ant\u00e9rieures \u00e0 101.103.46651.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Exchange Server Subscription Edition RTM versions ant\u00e9rieures \u00e0 15.02.2562.045",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-55030",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55030"
},
{
"name": "CVE-2026-55134",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55134"
},
{
"name": "CVE-2026-55020",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55020"
},
{
"name": "CVE-2026-45646",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45646"
},
{
"name": "CVE-2026-50657",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50657"
},
{
"name": "CVE-2026-50524",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50524"
},
{
"name": "CVE-2026-55130",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55130"
},
{
"name": "CVE-2026-55142",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55142"
},
{
"name": "CVE-2026-55944",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55944"
},
{
"name": "CVE-2026-55002",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55002"
},
{
"name": "CVE-2026-50522",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50522"
},
{
"name": "CVE-2026-55009",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55009"
},
{
"name": "CVE-2026-57101",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-57101"
},
{
"name": "CVE-2026-56642",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56642"
},
{
"name": "CVE-2026-56178",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56178"
},
{
"name": "CVE-2026-55033",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55033"
},
{
"name": "CVE-2026-56157",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56157"
},
{
"name": "CVE-2026-55026",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55026"
},
{
"name": "CVE-2026-50510",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50510"
},
{
"name": "CVE-2026-55038",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55038"
},
{
"name": "CVE-2026-47282",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47282"
},
{
"name": "CVE-2026-50526",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50526"
},
{
"name": "CVE-2026-55021",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55021"
},
{
"name": "CVE-2026-45496",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45496"
},
{
"name": "CVE-2026-55055",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55055"
},
{
"name": "CVE-2026-55028",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55028"
},
{
"name": "CVE-2026-55045",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55045"
},
{
"name": "CVE-2026-55051",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55051"
},
{
"name": "CVE-2026-55135",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55135"
},
{
"name": "CVE-2026-55035",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55035"
},
{
"name": "CVE-2026-55008",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55008"
},
{
"name": "CVE-2026-55019",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55019"
},
{
"name": "CVE-2026-47305",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47305"
},
{
"name": "CVE-2026-55016",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55016"
},
{
"name": "CVE-2026-58595",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58595"
},
{
"name": "CVE-2026-47303",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47303"
},
{
"name": "CVE-2026-47295",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47295"
},
{
"name": "CVE-2026-50468",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50468"
},
{
"name": "CVE-2026-50663",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50663"
},
{
"name": "CVE-2026-55047",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55047"
},
{
"name": "CVE-2026-55011",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55011"
},
{
"name": "CVE-2026-55052",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55052"
},
{
"name": "CVE-2026-50650",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50650"
},
{
"name": "CVE-2026-55128",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55128"
},
{
"name": "CVE-2026-55145",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55145"
},
{
"name": "CVE-2026-55006",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55006"
},
{
"name": "CVE-2026-55012",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55012"
},
{
"name": "CVE-2026-47296",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47296"
},
{
"name": "CVE-2026-57102",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-57102"
},
{
"name": "CVE-2026-47304",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47304"
},
{
"name": "CVE-2026-50527",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50527"
},
{
"name": "CVE-2026-55027",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55027"
},
{
"name": "CVE-2026-55032",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55032"
},
{
"name": "CVE-2026-55126",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55126"
},
{
"name": "CVE-2026-58647",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58647"
},
{
"name": "CVE-2026-55050",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55050"
},
{
"name": "CVE-2026-56164",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56164"
},
{
"name": "CVE-2026-50506",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50506"
},
{
"name": "CVE-2026-50525",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50525"
},
{
"name": "CVE-2026-48581",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48581"
},
{
"name": "CVE-2026-55034",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55034"
},
{
"name": "CVE-2026-55124",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55124"
},
{
"name": "CVE-2026-54108",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54108"
},
{
"name": "CVE-2026-50520",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50520"
},
{
"name": "CVE-2026-50528",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50528"
},
{
"name": "CVE-2026-58636",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58636"
},
{
"name": "CVE-2026-55127",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55127"
},
{
"name": "CVE-2026-55121",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55121"
},
{
"name": "CVE-2026-47302",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47302"
},
{
"name": "CVE-2026-56192",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56192"
},
{
"name": "CVE-2026-47301",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47301"
},
{
"name": "CVE-2026-50646",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50646"
},
{
"name": "CVE-2026-50648",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50648"
},
{
"name": "CVE-2026-50438",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50438"
},
{
"name": "CVE-2026-55132",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55132"
},
{
"name": "CVE-2026-55125",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55125"
},
{
"name": "CVE-2026-55040",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55040"
},
{
"name": "CVE-2026-55023",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55023"
},
{
"name": "CVE-2026-54116",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54116"
},
{
"name": "CVE-2026-55005",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55005"
},
{
"name": "CVE-2026-50659",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50659"
},
{
"name": "CVE-2026-54118",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54118"
},
{
"name": "CVE-2026-47300",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47300"
},
{
"name": "CVE-2026-50651",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50651"
},
{
"name": "CVE-2026-50658",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50658"
},
{
"name": "CVE-2026-58644",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58644"
},
{
"name": "CVE-2026-50649",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50649"
},
{
"name": "CVE-2026-54117",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54117"
},
{
"name": "CVE-2026-58277",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58277"
}
],
"initial_release_date": "2026-07-15T00:00:00",
"last_revision_date": "2026-07-15T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-0872",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-07-15T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Microsoft. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service \u00e0 distance.\n\nMicrosoft indique que la vuln\u00e9rabilit\u00e9 CVE-2026-56164 est activement exploit\u00e9e.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Microsoft",
"vendor_advisories": [
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50649",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50649"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55130",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55130"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50658",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50658"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-54108",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54108"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-47296",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47296"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-54118",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54118"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55124",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55124"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55132",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55132"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-57102",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57102"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-54116",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54116"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55142",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55142"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-47282",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47282"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55126",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55126"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-58647",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58647"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50650",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50650"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-57101",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57101"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-54118",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54118"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-45496",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45496"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55127",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55127"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50527",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50527"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55032",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55032"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50526",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50526"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55002",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55002"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-47302",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47302"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50506",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50506"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50520",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50520"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55038",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55038"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55021",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55021"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55121",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55121"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55006",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55006"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-58277",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58277"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55134",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55134"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55027",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55027"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55035",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55035"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55128",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55128"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55055",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55055"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-47305",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47305"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50438",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50438"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55135",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55135"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-58636",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58636"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-58595",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58595"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55019",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55019"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55023",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55023"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50648",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50648"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55009",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55009"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55026",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55026"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55045",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55045"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-56157",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56157"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50528",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50528"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50646",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50646"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50651",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50651"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55033",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55033"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55016",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55016"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55944",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55944"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-47300",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47300"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55030",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55030"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55012",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55012"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-47295",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47295"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50510",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50510"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55125",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55125"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-58644",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58644"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50659",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50659"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-47303",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47303"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-54117",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54117"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-56164",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56164"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55011",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55011"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55052",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55052"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-56192",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56192"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55008",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55008"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-56642",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56642"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50525",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50525"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55028",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55028"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-45646",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45646"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50522",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50522"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55051",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55051"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-56178",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56178"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-48581",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48581"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50657",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50657"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55047",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55047"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50468",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50468"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-47304",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47304"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55145",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55145"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55040",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55040"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50663",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50663"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-47301",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47301"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55034",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55034"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55005",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55005"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50524",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50524"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55050",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55050"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55020",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55020"
}
]
}
FKIE_CVE-2026-50650
Vulnerability from fkie_nvd - Published: 2026-07-14 20:17 - Updated: 2026-07-21 00:17
Severity
Summary
Improper control of generation of code ('code injection') in .NET Framework allows an unauthorized attacker to elevate privileges locally.
References
Impacted products
| Vendor | Product | Version |
|---|
{
"affected": [
{
"affectedData": [
{
"product": ".NET 8.0",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "8.0.29",
"status": "affected",
"version": "8.0.0",
"versionType": "custom"
}
]
},
{
"product": ".NET 9.0",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "9.0.18",
"status": "affected",
"version": "9.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"Windows Server 2012",
"Windows Server 2012 (Server Core installation)",
"Windows Server 2012 R2",
"Windows Server 2012 R2 (Server Core installation)"
],
"product": "Microsoft .NET Framework 3.5",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "2.0.50727.8983 \u0026 3.0.30729.8978",
"status": "affected",
"version": "3.5.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"Windows 10 Version 1607 for 32-bit Systems",
"Windows 10 Version 1607 for x64-based Systems",
"Windows 10 Version 1809 for 32-bit Systems",
"Windows 10 Version 1809 for x64-based Systems",
"Windows Server 2016",
"Windows Server 2016 (Server Core installation)",
"Windows Server 2019",
"Windows Server 2019 (Server Core installation)"
],
"product": "Microsoft .NET Framework 3.5 AND 4.7.2",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "2.0.50727.9069 \u0026 3.0.30729.9067 \u0026 4.7.4143.0",
"status": "affected",
"version": "4.7.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"Windows 10 Version 1809 for 32-bit Systems",
"Windows 10 Version 1809 for x64-based Systems",
"Windows 10 Version 21H2 for 32-bit Systems",
"Windows 10 Version 21H2 for ARM64-based Systems",
"Windows 10 Version 21H2 for x64-based Systems",
"Windows 10 Version 22H2 for 32-bit Systems",
"Windows 10 Version 22H2 for ARM64-based Systems",
"Windows 10 Version 22H2 for x64-based Systems",
"Windows Server 2019",
"Windows Server 2019 (Server Core installation)",
"Windows Server 2022",
"Windows Server 2022 (Server Core installation)"
],
"product": "Microsoft .NET Framework 3.5 AND 4.8",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "2.0.50727.9069 \u0026 3.0.30729.9067 \u0026 4.8.4803.0",
"status": "affected",
"version": "4.8.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"Windows 10 Version 21H2 for 32-bit Systems",
"Windows 10 Version 21H2 for ARM64-based Systems",
"Windows 10 Version 21H2 for x64-based Systems",
"Windows 10 Version 22H2 for 32-bit Systems",
"Windows 10 Version 22H2 for ARM64-based Systems",
"Windows 10 Version 22H2 for x64-based Systems",
"Windows 11 Version 23H2 for ARM64-based Systems",
"Windows 11 Version 23H2 for x64-based Systems",
"Windows 11 Version 24H2 for ARM64-based Systems",
"Windows 11 Version 24H2 for x64-based Systems",
"Windows 11 Version 25H2 for ARM64-based Systems",
"Windows 11 Version 25H2 for x64-based Systems",
"Windows 11 Version 26H1 for ARM64-based Systems",
"Windows 11 version 26H1 for x64-based Systems",
"Windows Server 2022",
"Windows Server 2022 (Server Core installation)"
],
"product": "Microsoft .NET Framework 3.5 AND 4.8.1",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "2.0.50727.9182 \u0026 3.0.30729.9168 \u0026 4.8.9339.0",
"status": "affected",
"version": "4.8.1",
"versionType": "custom"
}
]
},
{
"platforms": [
"Windows Server 2012",
"Windows Server 2012 (Server Core installation)",
"Windows Server 2012 R2",
"Windows Server 2012 R2 (Server Core installation)"
],
"product": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "4.7.4143.0",
"status": "affected",
"version": "4.7.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"Windows 10 Version 1607 for 32-bit Systems",
"Windows 10 Version 1607 for x64-based Systems",
"Windows Server 2012",
"Windows Server 2012 (Server Core installation)",
"Windows Server 2012 R2",
"Windows Server 2012 R2 (Server Core installation)",
"Windows Server 2016",
"Windows Server 2016 (Server Core installation)"
],
"product": "Microsoft .NET Framework 4.8",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "4.8.4803.0",
"status": "affected",
"version": "4.8.0",
"versionType": "custom"
}
]
},
{
"product": "Microsoft Visual Studio 2022 version 17.12",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "17.12.22",
"status": "affected",
"version": "17.12.0",
"versionType": "custom"
}
]
},
{
"product": "Microsoft Visual Studio 2022 version 17.14",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "17.14.36",
"status": "affected",
"version": "17.14.0",
"versionType": "custom"
}
]
},
{
"product": "Microsoft Visual Studio 2026 version 18.7",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "18.7.4",
"status": "affected",
"version": "18.0",
"versionType": "custom"
}
]
}
],
"source": "secure@microsoft.com"
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Improper control of generation of code (\u0027code injection\u0027) in .NET Framework allows an unauthorized attacker to elevate privileges locally."
}
],
"id": "CVE-2026-50650",
"lastModified": "2026-07-21T00:17:22.417",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9,
"source": "secure@microsoft.com",
"type": "Secondary"
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2026-50650",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-07-15T03:57:16.992459Z",
"version": "2.0.3"
}
}
]
},
"published": "2026-07-14T20:17:38.230",
"references": [
{
"source": "secure@microsoft.com",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50650"
}
],
"sourceIdentifier": "secure@microsoft.com",
"vulnStatus": "Awaiting Analysis",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-94"
}
],
"source": "secure@microsoft.com",
"type": "Secondary"
}
]
}
GHSA-2969-4Q4W-W5H3
Vulnerability from github – Published: 2026-07-21 16:06 – Updated: 2026-07-21 16:06
VLAI
Summary
Microsoft Security Advisory CVE-2026-50650 – .NET Elevation of Privilege Vulnerability
Details
Executive summary
Microsoft is releasing this security advisory to provide information about a vulnerability in Windows Presentation Foundation (WPF). This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.
An elevation of privilege vulnerability exists in Windows Presentation Foundation (WPF) in .NET 8, .NET 9, and .NET 10 when parsing specially crafted XAML input. An attacker who successfully exploits this vulnerability could elevate privileges on the affected system.
Announcement
Announcement for this issue can be found at https://github.com/dotnet/announcements/issues/TBD
CVSS Details
- Version: 3.1
- Severity: High
- Score: 7.8
- Vector:
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness: CWE-94 (Improper Control of Generation of Code ('Code Injection'))
Affected Platforms
- Platforms: Windows
- Architectures: All
Affected Packages
The vulnerability affects any Microsoft .NET project if it uses any of affected package versions listed below
.NET 10.0
| Package name | Affected version | Patched version |
|---|---|---|
| Microsoft.WindowsDesktop.App.Runtime.win-arm64 | >= 10.0.0, <= 10.0.9 | 10.0.10 |
| Microsoft.WindowsDesktop.App.Runtime.win-x64 | >= 10.0.0, <= 10.0.9 | 10.0.10 |
| Microsoft.WindowsDesktop.App.Runtime.win-x86 | >= 10.0.0, <= 10.0.9 | 10.0.10 |
.NET 9.0
| Package name | Affected version | Patched version |
|---|---|---|
| Microsoft.WindowsDesktop.App.Runtime.win-arm64 | >= 9.0.0, <= 9.0.17 | 9.0.18 |
| Microsoft.WindowsDesktop.App.Runtime.win-x64 | >= 9.0.0, <= 9.0.17 | 9.0.18 |
| Microsoft.WindowsDesktop.App.Runtime.win-x86 | >= 9.0.0, <= 9.0.17 | 9.0.18 |
.NET 8.0
| Package name | Affected version | Patched version |
|---|---|---|
| Microsoft.WindowsDesktop.App.Runtime.win-arm64 | >= 8.0.0, <= 8.0.28 | 8.0.29 |
| Microsoft.WindowsDesktop.App.Runtime.win-x64 | >= 8.0.0, <= 8.0.28 | 8.0.29 |
| Microsoft.WindowsDesktop.App.Runtime.win-x86 | >= 8.0.0, <= 8.0.28 | 8.0.29 |
Advisory FAQ
How do I know if I am affected?
If using a package listed in affected packages, you're exposed to the vulnerability.
How do I fix the issue?
- To fix the issue please install the latest version of .NET. If you have installed one or more .NET SDKs through Visual Studio, Visual Studio will prompt you to update Visual Studio, which will also update your .NET SDKs.
- If your application references the vulnerable nuget package, update the package reference to the patched version. You can list the versions you have installed by running the
dotnet --infocommand.
Once you have installed the updated runtime or SDK, restart your apps for the update to take effect.
Additionally, if you've deployed self-contained applications targeting any of the impacted versions, these applications are also vulnerable and must be recompiled and redeployed.
Other Information
Reporting Security Issues
If you have found a potential security issue in a supported version of .NET, please report it to the Microsoft Security Response Center (MSRC) via the MSRC Researcher Portal. Further information can be found in the MSRC Report an Issue FAQ.
Security reports made through MSRC may qualify for the Microsoft .NET Bounty. Details of the Microsoft .NET Bounty Program including terms and conditions are at https://aka.ms/corebounty.
Support
You can ask questions about this issue on GitHub in the .NET GitHub organization. The main repos are located at https://github.com/dotnet/runtime. The Announcements repo (https://github.com/dotnet/Announcements) will contain this bulletin as an issue and will include a link to a discussion issue. You can ask questions in the linked discussion issue.
Disclaimer
The information provided in this advisory is provided "as is" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.
External Links
Acknowledgements
41ae55e9310ff27fa6f26af4727e5590
Revisions
V1.0 (July 14, 2026): Advisory published.
Severity
7.8 (High)
{
"affected": [
{
"database_specific": {
"last_known_affected_version_range": "\u003c= 10.0.9"
},
"package": {
"ecosystem": "NuGet",
"name": "Microsoft.WindowsDesktop.App.Runtime.win-x64"
},
"ranges": [
{
"events": [
{
"introduced": "10.0.0"
},
{
"fixed": "10.0.10"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"database_specific": {
"last_known_affected_version_range": "\u003c= 10.0.9"
},
"package": {
"ecosystem": "NuGet",
"name": "Microsoft.WindowsDesktop.App.Runtime.win-x86"
},
"ranges": [
{
"events": [
{
"introduced": "10.0.0"
},
{
"fixed": "10.0.10"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"database_specific": {
"last_known_affected_version_range": "\u003c= 10.0.9"
},
"package": {
"ecosystem": "NuGet",
"name": "Microsoft.WindowsDesktop.App.Runtime.win-arm64"
},
"ranges": [
{
"events": [
{
"introduced": "10.0.0"
},
{
"fixed": "10.0.10"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"database_specific": {
"last_known_affected_version_range": "\u003c= 9.0.17"
},
"package": {
"ecosystem": "NuGet",
"name": "Microsoft.WindowsDesktop.App.Runtime.win-x64"
},
"ranges": [
{
"events": [
{
"introduced": "9.0.0"
},
{
"fixed": "9.0.18"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"database_specific": {
"last_known_affected_version_range": "\u003c= 9.0.17"
},
"package": {
"ecosystem": "NuGet",
"name": "Microsoft.WindowsDesktop.App.Runtime.win-x86"
},
"ranges": [
{
"events": [
{
"introduced": "9.0.0"
},
{
"fixed": "9.0.18"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"database_specific": {
"last_known_affected_version_range": "\u003c= 9.0.17"
},
"package": {
"ecosystem": "NuGet",
"name": "Microsoft.WindowsDesktop.App.Runtime.win-arm64"
},
"ranges": [
{
"events": [
{
"introduced": "9.0.0"
},
{
"fixed": "9.0.18"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"database_specific": {
"last_known_affected_version_range": "\u003c= 8.0.28"
},
"package": {
"ecosystem": "NuGet",
"name": "Microsoft.WindowsDesktop.App.Runtime.win-x64"
},
"ranges": [
{
"events": [
{
"introduced": "8.0.0"
},
{
"fixed": "8.0.29"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"database_specific": {
"last_known_affected_version_range": "\u003c= 8.0.28"
},
"package": {
"ecosystem": "NuGet",
"name": "Microsoft.WindowsDesktop.App.Runtime.win-x86"
},
"ranges": [
{
"events": [
{
"introduced": "8.0.0"
},
{
"fixed": "8.0.29"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"database_specific": {
"last_known_affected_version_range": "\u003c= 8.0.28"
},
"package": {
"ecosystem": "NuGet",
"name": "Microsoft.WindowsDesktop.App.Runtime.win-arm64"
},
"ranges": [
{
"events": [
{
"introduced": "8.0.0"
},
{
"fixed": "8.0.29"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"aliases": [
"CVE-2026-50650"
],
"database_specific": {
"cwe_ids": [
"CWE-94"
],
"github_reviewed": true,
"github_reviewed_at": "2026-07-21T16:06:24Z",
"nvd_published_at": "2026-07-14T20:17:38Z",
"severity": "HIGH"
},
"details": "## Executive summary\n\nMicrosoft is releasing this security advisory to provide information about a vulnerability in Windows Presentation Foundation (WPF). This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.\n\nAn elevation of privilege vulnerability exists in Windows Presentation Foundation (WPF) in .NET 8, .NET 9, and .NET 10 when parsing specially crafted XAML input. An attacker who successfully exploits this vulnerability could elevate privileges on the affected system.\n\n## Announcement\n\nAnnouncement for this issue can be found at https://github.com/dotnet/announcements/issues/**TBD**\n\n## CVSS Details\n\n- **Version:** 3.1\n- **Severity:** High\n- **Score:** 7.8\n- **Vector:** `CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H`\n- **Weakness:** CWE-94 (Improper Control of Generation of Code (\u0027Code Injection\u0027))\n\n## Affected Platforms\n\n- **Platforms:** Windows\n- **Architectures:** All\n\n## \u003ca name=\"affected-packages\"\u003e\u003c/a\u003eAffected Packages\nThe vulnerability affects any Microsoft .NET project if it uses any of affected package versions listed below\n\n### \u003ca name=\".NET 10.0\"\u003e\u003c/a\u003e.NET 10.0\nPackage name | Affected version | Patched version\n------------ | ---------------- | -------------------------\n[Microsoft.WindowsDesktop.App.Runtime.win-arm64](https://www.nuget.org/packages/Microsoft.WindowsDesktop.App.Runtime.win-arm64) | \u003e= 10.0.0, \u003c= 10.0.9 | 10.0.10\n[Microsoft.WindowsDesktop.App.Runtime.win-x64](https://www.nuget.org/packages/Microsoft.WindowsDesktop.App.Runtime.win-x64) | \u003e= 10.0.0, \u003c= 10.0.9 | 10.0.10\n[Microsoft.WindowsDesktop.App.Runtime.win-x86](https://www.nuget.org/packages/Microsoft.WindowsDesktop.App.Runtime.win-x86) | \u003e= 10.0.0, \u003c= 10.0.9 | 10.0.10\n\n### \u003ca name=\".NET 9.0\"\u003e\u003c/a\u003e.NET 9.0\nPackage name | Affected version | Patched version\n------------ | ---------------- | -------------------------\n[Microsoft.WindowsDesktop.App.Runtime.win-arm64](https://www.nuget.org/packages/Microsoft.WindowsDesktop.App.Runtime.win-arm64) | \u003e= 9.0.0, \u003c= 9.0.17 | 9.0.18\n[Microsoft.WindowsDesktop.App.Runtime.win-x64](https://www.nuget.org/packages/Microsoft.WindowsDesktop.App.Runtime.win-x64) | \u003e= 9.0.0, \u003c= 9.0.17 | 9.0.18\n[Microsoft.WindowsDesktop.App.Runtime.win-x86](https://www.nuget.org/packages/Microsoft.WindowsDesktop.App.Runtime.win-x86) | \u003e= 9.0.0, \u003c= 9.0.17 | 9.0.18\n\n### \u003ca name=\".NET 8.0\"\u003e\u003c/a\u003e.NET 8.0\nPackage name | Affected version | Patched version\n------------ | ---------------- | -------------------------\n[Microsoft.WindowsDesktop.App.Runtime.win-arm64](https://www.nuget.org/packages/Microsoft.WindowsDesktop.App.Runtime.win-arm64) | \u003e= 8.0.0, \u003c= 8.0.28 | 8.0.29\n[Microsoft.WindowsDesktop.App.Runtime.win-x64](https://www.nuget.org/packages/Microsoft.WindowsDesktop.App.Runtime.win-x64) | \u003e= 8.0.0, \u003c= 8.0.28 | 8.0.29\n[Microsoft.WindowsDesktop.App.Runtime.win-x86](https://www.nuget.org/packages/Microsoft.WindowsDesktop.App.Runtime.win-x86) | \u003e= 8.0.0, \u003c= 8.0.28 | 8.0.29\n\n## Advisory FAQ\n\n### \u003ca name=\"how-affected\"\u003e\u003c/a\u003eHow do I know if I am affected?\n\nIf using a package listed in [affected packages](#affected-packages), you\u0027re exposed to the vulnerability.\n\n### \u003ca name=\"how-fix\"\u003e\u003c/a\u003eHow do I fix the issue?\n\n1. To fix the issue please install the latest version of .NET. If you have installed one or more .NET SDKs through Visual Studio, Visual Studio will prompt you to update Visual Studio, which will also update your .NET SDKs.\n2. If your application references the vulnerable nuget package, update the package reference to the patched version. You can list the versions you have installed by running the `dotnet --info` command.\n\nOnce you have installed the updated runtime or SDK, restart your apps for the update to take effect.\n\nAdditionally, if you\u0027ve deployed [self-contained applications](https://docs.microsoft.com/dotnet/core/deploying/#self-contained-deployments-scd) targeting any of the impacted versions, these applications are also vulnerable and must be recompiled and redeployed.\n\n## Other Information\n\n### Reporting Security Issues\n\nIf you have found a potential security issue in a supported version of .NET, please report it to the Microsoft Security Response Center (MSRC) via the [MSRC Researcher Portal](https://msrc.microsoft.com/report/vulnerability/new). Further information can be found in the MSRC [Report an Issue FAQ](https://www.microsoft.com/msrc/faqs-report-an-issue).\n\nSecurity reports made through MSRC may qualify for the Microsoft .NET Bounty. Details of the Microsoft .NET Bounty Program including terms and conditions are at https://aka.ms/corebounty.\n\n### Support\n\nYou can ask questions about this issue on GitHub in the .NET GitHub organization. The main repos are located at https://github.com/dotnet/runtime. The Announcements repo (https://github.com/dotnet/Announcements) will contain this bulletin as an issue and will include a link to a discussion issue. You can ask questions in the linked discussion issue.\n\n### Disclaimer\n\nThe information provided in this advisory is provided \"as is\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.\n\n### External Links\n\n[CVE-2026-50650]( https://www.cve.org/CVERecord?id=CVE-2026-50650)\n\n### Acknowledgements\n\n41ae55e9310ff27fa6f26af4727e5590\n\n### Revisions\n\nV1.0 (July 14, 2026): Advisory published.",
"id": "GHSA-2969-4q4w-w5h3",
"modified": "2026-07-21T16:06:24Z",
"published": "2026-07-21T16:06:24Z",
"references": [
{
"type": "WEB",
"url": "https://github.com/dotnet/wpf/security/advisories/GHSA-2969-4q4w-w5h3"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-50650"
},
{
"type": "WEB",
"url": "https://github.com/dotnet/announcements/issues/421"
},
{
"type": "WEB",
"url": "https://github.com/dotnet/wpf/issues/11784"
},
{
"type": "PACKAGE",
"url": "https://github.com/dotnet/wpf"
},
{
"type": "WEB",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50650"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
}
],
"summary": "Microsoft Security Advisory CVE-2026-50650 \u2013 .NET Elevation of Privilege Vulnerability"
}
MSRC_CVE-2026-50650
Vulnerability from csaf_microsoft - Published: 2026-07-14 07:00 - Updated: 2026-07-20 07:00Summary
.NET Framework Elevation of Privilege Vulnerability
Severity
Important
Notes
Additional Resources: To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle
Disclaimer: The information provided in the Microsoft Knowledge Base is provided \"as is\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.
Customer Action: Required. The vulnerability documented by this CVE requires customer action to resolve.
CWE-94
- Improper Control of Generation of Code ('Code Injection')
Affected products
Fixed
58 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Microsoft .NET Framework 4.8 4.8.4803.0
Microsoft .NET Framework 4.8
|
4.8.4803.0 | ||
|
Microsoft .NET Framework 4.8 4.8.4803.0
Microsoft .NET Framework 4.8
|
4.8.4803.0 | ||
|
Microsoft .NET Framework 4.8 4.8.4803.0
Microsoft .NET Framework 4.8
|
4.8.4803.0 | ||
|
Microsoft .NET Framework 4.8 4.8.4803.0
Microsoft .NET Framework 4.8
|
4.8.4803.0 | ||
|
Microsoft .NET Framework 4.8 4.8.4803.0
Microsoft .NET Framework 4.8
|
4.8.4803.0 | ||
|
Microsoft .NET Framework 4.8 4.8.4803.0
Microsoft .NET Framework 4.8
|
4.8.4803.0 | ||
|
Microsoft .NET Framework 4.8 4.8.4803.0
Microsoft .NET Framework 4.8
|
4.8.4803.0 | ||
|
Microsoft .NET Framework 4.8 4.8.4803.0
Microsoft .NET Framework 4.8
|
4.8.4803.0 | ||
|
Microsoft .NET Framework 3.5 AND 4.8 2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0
Microsoft .NET Framework 3.5 AND 4.8
|
2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0 | ||
|
Microsoft .NET Framework 3.5 AND 4.8 2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0
Microsoft .NET Framework 3.5 AND 4.8
|
2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0 | ||
|
Microsoft .NET Framework 3.5 AND 4.8 2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0
Microsoft .NET Framework 3.5 AND 4.8
|
2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0 | ||
|
Microsoft .NET Framework 3.5 AND 4.8 2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0
Microsoft .NET Framework 3.5 AND 4.8
|
2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0 | ||
|
Microsoft .NET Framework 3.5 AND 4.8 2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0
Microsoft .NET Framework 3.5 AND 4.8
|
2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0 | ||
|
Microsoft .NET Framework 3.5 AND 4.8 2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0
Microsoft .NET Framework 3.5 AND 4.8
|
2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0 | ||
|
Microsoft .NET Framework 3.5 AND 4.8 2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0
Microsoft .NET Framework 3.5 AND 4.8
|
2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0 | ||
|
Microsoft .NET Framework 3.5 AND 4.8 2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0
Microsoft .NET Framework 3.5 AND 4.8
|
2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0 | ||
|
Microsoft .NET Framework 3.5 AND 4.8 2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0
Microsoft .NET Framework 3.5 AND 4.8
|
2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0 | ||
|
Microsoft .NET Framework 3.5 AND 4.8 2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0
Microsoft .NET Framework 3.5 AND 4.8
|
2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0 | ||
|
Microsoft .NET Framework 3.5 AND 4.8 2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0
Microsoft .NET Framework 3.5 AND 4.8
|
2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0 | ||
|
Microsoft .NET Framework 3.5 AND 4.8 2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0
Microsoft .NET Framework 3.5 AND 4.8
|
2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0 | ||
|
Microsoft .NET Framework 3.5 AND 4.7.2 2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0
Microsoft .NET Framework 3.5 AND 4.7.2
|
2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0 | ||
|
Microsoft .NET Framework 3.5 AND 4.7.2 2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0
Microsoft .NET Framework 3.5 AND 4.7.2
|
2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0 | ||
|
Microsoft .NET Framework 3.5 AND 4.7.2 2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0
Microsoft .NET Framework 3.5 AND 4.7.2
|
2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0 | ||
|
Microsoft .NET Framework 3.5 AND 4.7.2 2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0
Microsoft .NET Framework 3.5 AND 4.7.2
|
2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0 | ||
|
Microsoft .NET Framework 3.5 AND 4.7.2 2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0
Microsoft .NET Framework 3.5 AND 4.7.2
|
2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0 | ||
|
Microsoft .NET Framework 3.5 AND 4.7.2 2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0
Microsoft .NET Framework 3.5 AND 4.7.2
|
2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0 | ||
|
Microsoft .NET Framework 3.5 AND 4.7.2 2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0
Microsoft .NET Framework 3.5 AND 4.7.2
|
2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0 | ||
|
Microsoft .NET Framework 3.5 AND 4.7.2 2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0
Microsoft .NET Framework 3.5 AND 4.7.2
|
2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0 | ||
|
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 4.7.4143.0
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2
|
4.7.4143.0 | ||
|
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 4.7.4143.0
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2
|
4.7.4143.0 | ||
|
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 4.7.4143.0
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2
|
4.7.4143.0 | ||
|
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 4.7.4143.0
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2
|
4.7.4143.0 | ||
|
Microsoft .NET Framework 3.5 AND 4.8.1 4.8.9340.0
Microsoft .NET Framework 3.5 AND 4.8.1
|
4.8.9340.0 | ||
|
Microsoft .NET Framework 3.5 AND 4.8.1 4.8.9340.0
Microsoft .NET Framework 3.5 AND 4.8.1
|
4.8.9340.0 | ||
|
Microsoft .NET Framework 3.5 AND 4.8.1 4.8.9340.0
Microsoft .NET Framework 3.5 AND 4.8.1
|
4.8.9340.0 | ||
|
Microsoft .NET Framework 3.5 AND 4.8.1 4.8.9340.0
Microsoft .NET Framework 3.5 AND 4.8.1
|
4.8.9340.0 | ||
|
Microsoft .NET Framework 3.5 AND 4.8.1 4.8.9340.0
Microsoft .NET Framework 3.5 AND 4.8.1
|
4.8.9340.0 | ||
|
Microsoft .NET Framework 3.5 AND 4.8.1 4.8.9340.0
Microsoft .NET Framework 3.5 AND 4.8.1
|
4.8.9340.0 | ||
|
Microsoft .NET Framework 3.5 AND 4.8.1 4.8.9340.0
Microsoft .NET Framework 3.5 AND 4.8.1
|
4.8.9340.0 | ||
|
Microsoft .NET Framework 3.5 AND 4.8.1 4.8.9340.0
Microsoft .NET Framework 3.5 AND 4.8.1
|
4.8.9340.0 | ||
|
Microsoft .NET Framework 3.5 AND 4.8.1 4.8.9340.0
Microsoft .NET Framework 3.5 AND 4.8.1
|
4.8.9340.0 | ||
|
Microsoft .NET Framework 3.5 AND 4.8.1 4.8.9340.0
Microsoft .NET Framework 3.5 AND 4.8.1
|
4.8.9340.0 | ||
|
Microsoft .NET Framework 3.5 AND 4.8.1 4.8.9340.0
Microsoft .NET Framework 3.5 AND 4.8.1
|
4.8.9340.0 | ||
|
Microsoft .NET Framework 3.5 AND 4.8.1 4.8.9340.0
Microsoft .NET Framework 3.5 AND 4.8.1
|
4.8.9340.0 | ||
|
Microsoft .NET Framework 3.5 AND 4.8.1 4.8.9340.0
Microsoft .NET Framework 3.5 AND 4.8.1
|
4.8.9340.0 | ||
|
Microsoft .NET Framework 3.5 AND 4.8.1 4.8.9340.0
Microsoft .NET Framework 3.5 AND 4.8.1
|
4.8.9340.0 | ||
|
Microsoft .NET Framework 3.5 AND 4.8.1 4.8.9340.0
Microsoft .NET Framework 3.5 AND 4.8.1
|
4.8.9340.0 | ||
|
Microsoft .NET Framework 3.5 AND 4.8.1 4.8.9340.0
Microsoft .NET Framework 3.5 AND 4.8.1
|
4.8.9340.0 | ||
|
Microsoft .NET Framework 3.5 AND 4.8.1 4.8.9340.0
Microsoft .NET Framework 3.5 AND 4.8.1
|
4.8.9340.0 | ||
|
.NET 8.0 installed on Windows 8.0.29
.NET 8.0 installed on Windows
|
8.0.29 | ||
|
.NET 9.0 installed on Windows 9.0.18
.NET 9.0 installed on Windows
|
9.0.18 | ||
|
Microsoft Visual Studio 2022 version 17.12 17.12.22
Microsoft Visual Studio 2022 version 17.12
|
17.12.22 | ||
|
Microsoft Visual Studio 2022 version 17.14 17.14.36
Microsoft Visual Studio 2022 version 17.14
|
17.14.36 | ||
|
Microsoft Visual Studio 2026 version 18.7 18.7.4
Microsoft Visual Studio 2026 version 18.7
|
18.7.4 | ||
|
Microsoft .NET Framework 3.5 2.0.50727.8983 & 3.0.30729.8978
Microsoft .NET Framework 3.5
|
2.0.50727.8983 & 3.0.30729.8978 | ||
|
Microsoft .NET Framework 3.5 2.0.50727.8983 & 3.0.30729.8978
Microsoft .NET Framework 3.5
|
2.0.50727.8983 & 3.0.30729.8978 | ||
|
Microsoft .NET Framework 3.5 2.0.50727.8983 & 3.0.30729.8978
Microsoft .NET Framework 3.5
|
2.0.50727.8983 & 3.0.30729.8978 | ||
|
Microsoft .NET Framework 3.5 2.0.50727.8983 & 3.0.30729.8978
Microsoft .NET Framework 3.5
|
2.0.50727.8983 & 3.0.30729.8978 |
Known affected
58 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Microsoft Visual Studio 2026 version 18.7 <18.7.4
Microsoft Visual Studio 2026 version 18.7
|
<18.7.4 |
Vendor Fix
fix
|
|
|
Microsoft Visual Studio 2022 version 17.14 <17.14.36
Microsoft Visual Studio 2022 version 17.14
|
<17.14.36 |
Vendor Fix
fix
|
|
|
Microsoft Visual Studio 2022 version 17.12 <17.12.22
Microsoft Visual Studio 2022 version 17.12
|
<17.12.22 |
Vendor Fix
fix
|
|
|
.NET 9.0 installed on Windows <9.0.18
.NET 9.0 installed on Windows
|
<9.0.18 |
Vendor Fix
fix
|
|
|
.NET 8.0 installed on Windows <8.0.29
.NET 8.0 installed on Windows
|
<8.0.29 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8.1 <4.8.9340.0
Microsoft .NET Framework 3.5 AND 4.8.1
|
<4.8.9340.0 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8.1 <4.8.9340.0
Microsoft .NET Framework 3.5 AND 4.8.1
|
<4.8.9340.0 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8.1 <4.8.9340.0
Microsoft .NET Framework 3.5 AND 4.8.1
|
<4.8.9340.0 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8.1 <4.8.9340.0
Microsoft .NET Framework 3.5 AND 4.8.1
|
<4.8.9340.0 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8.1 <4.8.9340.0
Microsoft .NET Framework 3.5 AND 4.8.1
|
<4.8.9340.0 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8.1 <4.8.9340.0
Microsoft .NET Framework 3.5 AND 4.8.1
|
<4.8.9340.0 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8.1 <4.8.9340.0
Microsoft .NET Framework 3.5 AND 4.8.1
|
<4.8.9340.0 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8.1 <4.8.9340.0
Microsoft .NET Framework 3.5 AND 4.8.1
|
<4.8.9340.0 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8.1 <4.8.9340.0
Microsoft .NET Framework 3.5 AND 4.8.1
|
<4.8.9340.0 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8.1 <4.8.9340.0
Microsoft .NET Framework 3.5 AND 4.8.1
|
<4.8.9340.0 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8.1 <4.8.9340.0
Microsoft .NET Framework 3.5 AND 4.8.1
|
<4.8.9340.0 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8.1 <4.8.9340.0
Microsoft .NET Framework 3.5 AND 4.8.1
|
<4.8.9340.0 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8.1 <4.8.9340.0
Microsoft .NET Framework 3.5 AND 4.8.1
|
<4.8.9340.0 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8.1 <4.8.9340.0
Microsoft .NET Framework 3.5 AND 4.8.1
|
<4.8.9340.0 |
Vendor Fix
fix
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8.1 <4.8.9340.0
Microsoft .NET Framework 3.5 AND 4.8.1
|
<4.8.9340.0 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8.1 <4.8.9340.0
Microsoft .NET Framework 3.5 AND 4.8.1
|
<4.8.9340.0 |
Vendor Fix
fix
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8.1 <4.8.9340.0
Microsoft .NET Framework 3.5 AND 4.8.1
|
<4.8.9340.0 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 <4.7.4143.0
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2
|
<4.7.4143.0 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 <4.7.4143.0
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2
|
<4.7.4143.0 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 <4.7.4143.0
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2
|
<4.7.4143.0 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 <4.7.4143.0
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2
|
<4.7.4143.0 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.7.2 <2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0
Microsoft .NET Framework 3.5 AND 4.7.2
|
<2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.7.2 <2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0
Microsoft .NET Framework 3.5 AND 4.7.2
|
<2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.7.2 <2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0
Microsoft .NET Framework 3.5 AND 4.7.2
|
<2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.7.2 <2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0
Microsoft .NET Framework 3.5 AND 4.7.2
|
<2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.7.2 <2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0
Microsoft .NET Framework 3.5 AND 4.7.2
|
<2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.7.2 <2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0
Microsoft .NET Framework 3.5 AND 4.7.2
|
<2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.7.2 <2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0
Microsoft .NET Framework 3.5 AND 4.7.2
|
<2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.7.2 <2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0
Microsoft .NET Framework 3.5 AND 4.7.2
|
<2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8 <2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0
Microsoft .NET Framework 3.5 AND 4.8
|
<2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8 <2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0
Microsoft .NET Framework 3.5 AND 4.8
|
<2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8 <2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0
Microsoft .NET Framework 3.5 AND 4.8
|
<2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8 <2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0
Microsoft .NET Framework 3.5 AND 4.8
|
<2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8 <2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0
Microsoft .NET Framework 3.5 AND 4.8
|
<2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8 <2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0
Microsoft .NET Framework 3.5 AND 4.8
|
<2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8 <2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0
Microsoft .NET Framework 3.5 AND 4.8
|
<2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8 <2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0
Microsoft .NET Framework 3.5 AND 4.8
|
<2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8 <2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0
Microsoft .NET Framework 3.5 AND 4.8
|
<2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8 <2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0
Microsoft .NET Framework 3.5 AND 4.8
|
<2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8 <2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0
Microsoft .NET Framework 3.5 AND 4.8
|
<2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8 <2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0
Microsoft .NET Framework 3.5 AND 4.8
|
<2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 4.8 <4.8.4803.0
Microsoft .NET Framework 4.8
|
<4.8.4803.0 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 4.8 <4.8.4803.0
Microsoft .NET Framework 4.8
|
<4.8.4803.0 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 4.8 <4.8.4803.0
Microsoft .NET Framework 4.8
|
<4.8.4803.0 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 4.8 <4.8.4803.0
Microsoft .NET Framework 4.8
|
<4.8.4803.0 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 4.8 <4.8.4803.0
Microsoft .NET Framework 4.8
|
<4.8.4803.0 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 4.8 <4.8.4803.0
Microsoft .NET Framework 4.8
|
<4.8.4803.0 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 4.8 <4.8.4803.0
Microsoft .NET Framework 4.8
|
<4.8.4803.0 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 4.8 <4.8.4803.0
Microsoft .NET Framework 4.8
|
<4.8.4803.0 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 <2.0.50727.8983 & 3.0.30729.8978
Microsoft .NET Framework 3.5
|
<2.0.50727.8983 & 3.0.30729.8978 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 <2.0.50727.8983 & 3.0.30729.8978
Microsoft .NET Framework 3.5
|
<2.0.50727.8983 & 3.0.30729.8978 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 <2.0.50727.8983 & 3.0.30729.8978
Microsoft .NET Framework 3.5
|
<2.0.50727.8983 & 3.0.30729.8978 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 <2.0.50727.8983 & 3.0.30729.8978
Microsoft .NET Framework 3.5
|
<2.0.50727.8983 & 3.0.30729.8978 |
Vendor Fix
fix
|
Threats
Impact
Elevation of Privilege
Exploit Status
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely
References
7 references
| URL | Category |
|---|---|
| https://msrc.microsoft.com/update-guide/vulnerabi… | self |
| https://msrc.microsoft.com/csaf/advisories/2026/m… | self |
| https://www.microsoft.com/en-us/msrc/exploitabili… | external |
| https://support.microsoft.com/lifecycle | external |
| https://www.first.org/cvss | external |
| https://msrc.microsoft.com/update-guide/vulnerabi… | self |
| https://msrc.microsoft.com/csaf/advisories/2026/m… | self |
Acknowledgments
41ae55e9310ff27fa6f26af4727e5590
{
"document": {
"acknowledgments": [
{
"names": [
"41ae55e9310ff27fa6f26af4727e5590"
]
}
],
"aggregate_severity": {
"namespace": "https://www.microsoft.com/en-us/msrc/security-update-severity-rating-system",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Public",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en-US",
"notes": [
{
"category": "general",
"text": "To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle",
"title": "Additional Resources"
},
{
"category": "legal_disclaimer",
"text": "The information provided in the Microsoft Knowledge Base is provided \\\"as is\\\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.",
"title": "Disclaimer"
},
{
"category": "general",
"text": "Required. The vulnerability documented by this CVE requires customer action to resolve.",
"title": "Customer Action"
}
],
"publisher": {
"category": "vendor",
"contact_details": "secure@microsoft.com",
"name": "Microsoft Security Response Center",
"namespace": "https://msrc.microsoft.com"
},
"references": [
{
"category": "self",
"summary": "CVE-2026-50650 .NET Framework Elevation of Privilege Vulnerability - HTML",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50650"
},
{
"category": "self",
"summary": "CVE-2026-50650 .NET Framework Elevation of Privilege Vulnerability - CSAF",
"url": "https://msrc.microsoft.com/csaf/advisories/2026/msrc_cve-2026-50650.json"
},
{
"category": "external",
"summary": "Microsoft Exploitability Index",
"url": "https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1"
},
{
"category": "external",
"summary": "Microsoft Support Lifecycle",
"url": "https://support.microsoft.com/lifecycle"
},
{
"category": "external",
"summary": "Common Vulnerability Scoring System",
"url": "https://www.first.org/cvss"
}
],
"title": ".NET Framework Elevation of Privilege Vulnerability",
"tracking": {
"current_release_date": "2026-07-20T07:00:00.000Z",
"generator": {
"date": "2026-07-20T16:00:29.360Z",
"engine": {
"name": "MSRC Generator",
"version": "1.0"
}
},
"id": "msrc_CVE-2026-50650",
"initial_release_date": "2026-07-14T07:00:00.000Z",
"revision_history": [
{
"date": "2026-07-14T07:00:00.000Z",
"legacy_version": "1",
"number": "1",
"summary": "Information published."
},
{
"date": "2026-07-20T07:00:00.000Z",
"legacy_version": "2",
"number": "2",
"summary": "Updated product information in the Software Update table. This is an informational change only."
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c8.0.29",
"product": {
"name": ".NET 8.0 installed on Windows \u003c8.0.29",
"product_id": "5"
}
},
{
"category": "product_version",
"name": "8.0.29",
"product": {
"name": ".NET 8.0 installed on Windows 8.0.29",
"product_id": "12414"
}
}
],
"category": "product_name",
"name": ".NET 8.0 installed on Windows"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c9.0.18",
"product": {
"name": ".NET 9.0 installed on Windows \u003c9.0.18",
"product_id": "4"
}
},
{
"category": "product_version",
"name": "9.0.18",
"product": {
"name": ".NET 9.0 installed on Windows 9.0.18",
"product_id": "12434"
}
}
],
"category": "product_name",
"name": ".NET 9.0 installed on Windows"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c18.7.4",
"product": {
"name": "Microsoft Visual Studio 2026 version 18.7 \u003c18.7.4",
"product_id": "1"
}
},
{
"category": "product_version",
"name": "18.7.4",
"product": {
"name": "Microsoft Visual Studio 2026 version 18.7 18.7.4",
"product_id": "21581"
}
}
],
"category": "product_name",
"name": "Microsoft Visual Studio 2026 version 18.7"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c17.12.22",
"product": {
"name": "Microsoft Visual Studio 2022 version 17.12 \u003c17.12.22",
"product_id": "3"
}
},
{
"category": "product_version",
"name": "17.12.22",
"product": {
"name": "Microsoft Visual Studio 2022 version 17.12 17.12.22",
"product_id": "12459"
}
}
],
"category": "product_name",
"name": "Microsoft Visual Studio 2022 version 17.12"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c17.14.36",
"product": {
"name": "Microsoft Visual Studio 2022 version 17.14 \u003c17.14.36",
"product_id": "2"
}
},
{
"category": "product_version",
"name": "17.14.36",
"product": {
"name": "Microsoft Visual Studio 2022 version 17.14 17.14.36",
"product_id": "16767"
}
}
],
"category": "product_name",
"name": "Microsoft Visual Studio 2022 version 17.14"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.8.4803.0",
"product": {
"name": "Microsoft .NET Framework 4.8 \u003c4.8.4803.0",
"product_id": "47"
}
},
{
"category": "product_version",
"name": "4.8.4803.0",
"product": {
"name": "Microsoft .NET Framework 4.8 4.8.4803.0",
"product_id": "11650-10378"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 4.8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.8.4803.0",
"product": {
"name": "Microsoft .NET Framework 4.8 \u003c4.8.4803.0",
"product_id": "48"
}
},
{
"category": "product_version",
"name": "4.8.4803.0",
"product": {
"name": "Microsoft .NET Framework 4.8 4.8.4803.0",
"product_id": "11650-10379"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 4.8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.8.4803.0",
"product": {
"name": "Microsoft .NET Framework 4.8 \u003c4.8.4803.0",
"product_id": "49"
}
},
{
"category": "product_version",
"name": "4.8.4803.0",
"product": {
"name": "Microsoft .NET Framework 4.8 4.8.4803.0",
"product_id": "11650-10483"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 4.8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.8.4803.0",
"product": {
"name": "Microsoft .NET Framework 4.8 \u003c4.8.4803.0",
"product_id": "50"
}
},
{
"category": "product_version",
"name": "4.8.4803.0",
"product": {
"name": "Microsoft .NET Framework 4.8 4.8.4803.0",
"product_id": "11650-10855"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 4.8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.8.4803.0",
"product": {
"name": "Microsoft .NET Framework 4.8 \u003c4.8.4803.0",
"product_id": "51"
}
},
{
"category": "product_version",
"name": "4.8.4803.0",
"product": {
"name": "Microsoft .NET Framework 4.8 4.8.4803.0",
"product_id": "11650-10543"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 4.8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c2.0.50727.9182 \u0026 3.0.30729.9168 \u0026 4.8.4803.0",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 \u003c2.0.50727.9182 \u0026 3.0.30729.9168 \u0026 4.8.4803.0",
"product_id": "35"
}
},
{
"category": "product_version",
"name": "2.0.50727.9182 \u0026 3.0.30729.9168 \u0026 4.8.4803.0",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 2.0.50727.9182 \u0026 3.0.30729.9168 \u0026 4.8.4803.0",
"product_id": "11676-11568"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c2.0.50727.9182 \u0026 3.0.30729.9168 \u0026 4.8.4803.0",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 \u003c2.0.50727.9182 \u0026 3.0.30729.9168 \u0026 4.8.4803.0",
"product_id": "36"
}
},
{
"category": "product_version",
"name": "2.0.50727.9182 \u0026 3.0.30729.9168 \u0026 4.8.4803.0",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 2.0.50727.9182 \u0026 3.0.30729.9168 \u0026 4.8.4803.0",
"product_id": "11676-11569"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c2.0.50727.9182 \u0026 3.0.30729.9168 \u0026 4.8.4803.0",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 \u003c2.0.50727.9182 \u0026 3.0.30729.9168 \u0026 4.8.4803.0",
"product_id": "37"
}
},
{
"category": "product_version",
"name": "2.0.50727.9182 \u0026 3.0.30729.9168 \u0026 4.8.4803.0",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 2.0.50727.9182 \u0026 3.0.30729.9168 \u0026 4.8.4803.0",
"product_id": "11676-11572"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c2.0.50727.9182 \u0026 3.0.30729.9168 \u0026 4.8.4803.0",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 \u003c2.0.50727.9182 \u0026 3.0.30729.9168 \u0026 4.8.4803.0",
"product_id": "38"
}
},
{
"category": "product_version",
"name": "2.0.50727.9182 \u0026 3.0.30729.9168 \u0026 4.8.4803.0",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 2.0.50727.9182 \u0026 3.0.30729.9168 \u0026 4.8.4803.0",
"product_id": "11676-11571"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c2.0.50727.9182 \u0026 3.0.30729.9168 \u0026 4.8.4803.0",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 \u003c2.0.50727.9182 \u0026 3.0.30729.9168 \u0026 4.8.4803.0",
"product_id": "39"
}
},
{
"category": "product_version",
"name": "2.0.50727.9182 \u0026 3.0.30729.9168 \u0026 4.8.4803.0",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 2.0.50727.9182 \u0026 3.0.30729.9168 \u0026 4.8.4803.0",
"product_id": "11676-11923"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c2.0.50727.9182 \u0026 3.0.30729.9168 \u0026 4.8.4803.0",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 \u003c2.0.50727.9182 \u0026 3.0.30729.9168 \u0026 4.8.4803.0",
"product_id": "40"
}
},
{
"category": "product_version",
"name": "2.0.50727.9182 \u0026 3.0.30729.9168 \u0026 4.8.4803.0",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 2.0.50727.9182 \u0026 3.0.30729.9168 \u0026 4.8.4803.0",
"product_id": "11676-11924"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c2.0.50727.9182 \u0026 3.0.30729.9168 \u0026 4.8.4803.0",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 \u003c2.0.50727.9182 \u0026 3.0.30729.9168 \u0026 4.8.4803.0",
"product_id": "41"
}
},
{
"category": "product_version",
"name": "2.0.50727.9182 \u0026 3.0.30729.9168 \u0026 4.8.4803.0",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 2.0.50727.9182 \u0026 3.0.30729.9168 \u0026 4.8.4803.0",
"product_id": "11676-11929"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c2.0.50727.9182 \u0026 3.0.30729.9168 \u0026 4.8.4803.0",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 \u003c2.0.50727.9182 \u0026 3.0.30729.9168 \u0026 4.8.4803.0",
"product_id": "42"
}
},
{
"category": "product_version",
"name": "2.0.50727.9182 \u0026 3.0.30729.9168 \u0026 4.8.4803.0",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 2.0.50727.9182 \u0026 3.0.30729.9168 \u0026 4.8.4803.0",
"product_id": "11676-11931"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c2.0.50727.9182 \u0026 3.0.30729.9168 \u0026 4.8.4803.0",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 \u003c2.0.50727.9182 \u0026 3.0.30729.9168 \u0026 4.8.4803.0",
"product_id": "43"
}
},
{
"category": "product_version",
"name": "2.0.50727.9182 \u0026 3.0.30729.9168 \u0026 4.8.4803.0",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 2.0.50727.9182 \u0026 3.0.30729.9168 \u0026 4.8.4803.0",
"product_id": "11676-11930"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c2.0.50727.9182 \u0026 3.0.30729.9168 \u0026 4.8.4803.0",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 \u003c2.0.50727.9182 \u0026 3.0.30729.9168 \u0026 4.8.4803.0",
"product_id": "44"
}
},
{
"category": "product_version",
"name": "2.0.50727.9182 \u0026 3.0.30729.9168 \u0026 4.8.4803.0",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 2.0.50727.9182 \u0026 3.0.30729.9168 \u0026 4.8.4803.0",
"product_id": "11676-12097"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c2.0.50727.9182 \u0026 3.0.30729.9168 \u0026 4.8.4803.0",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 \u003c2.0.50727.9182 \u0026 3.0.30729.9168 \u0026 4.8.4803.0",
"product_id": "45"
}
},
{
"category": "product_version",
"name": "2.0.50727.9182 \u0026 3.0.30729.9168 \u0026 4.8.4803.0",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 2.0.50727.9182 \u0026 3.0.30729.9168 \u0026 4.8.4803.0",
"product_id": "11676-12098"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c2.0.50727.9182 \u0026 3.0.30729.9168 \u0026 4.8.4803.0",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 \u003c2.0.50727.9182 \u0026 3.0.30729.9168 \u0026 4.8.4803.0",
"product_id": "46"
}
},
{
"category": "product_version",
"name": "2.0.50727.9182 \u0026 3.0.30729.9168 \u0026 4.8.4803.0",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 2.0.50727.9182 \u0026 3.0.30729.9168 \u0026 4.8.4803.0",
"product_id": "11676-12099"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.8.4803.0",
"product": {
"name": "Microsoft .NET Framework 4.8 \u003c4.8.4803.0",
"product_id": "52"
}
},
{
"category": "product_version",
"name": "4.8.4803.0",
"product": {
"name": "Microsoft .NET Framework 4.8 4.8.4803.0",
"product_id": "11650-10853"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 4.8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.8.4803.0",
"product": {
"name": "Microsoft .NET Framework 4.8 \u003c4.8.4803.0",
"product_id": "53"
}
},
{
"category": "product_version",
"name": "4.8.4803.0",
"product": {
"name": "Microsoft .NET Framework 4.8 4.8.4803.0",
"product_id": "11650-10852"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 4.8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c2.0.50727.9069 \u0026 3.0.30729.9067 \u0026 4.7.4143.0",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.7.2 \u003c2.0.50727.9069 \u0026 3.0.30729.9067 \u0026 4.7.4143.0",
"product_id": "27"
}
},
{
"category": "product_version",
"name": "2.0.50727.9069 \u0026 3.0.30729.9067 \u0026 4.7.4143.0",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.7.2 2.0.50727.9069 \u0026 3.0.30729.9067 \u0026 4.7.4143.0",
"product_id": "11677-11568"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.7.2"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c2.0.50727.9069 \u0026 3.0.30729.9067 \u0026 4.7.4143.0",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.7.2 \u003c2.0.50727.9069 \u0026 3.0.30729.9067 \u0026 4.7.4143.0",
"product_id": "28"
}
},
{
"category": "product_version",
"name": "2.0.50727.9069 \u0026 3.0.30729.9067 \u0026 4.7.4143.0",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.7.2 2.0.50727.9069 \u0026 3.0.30729.9067 \u0026 4.7.4143.0",
"product_id": "11677-11569"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.7.2"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c2.0.50727.9069 \u0026 3.0.30729.9067 \u0026 4.7.4143.0",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.7.2 \u003c2.0.50727.9069 \u0026 3.0.30729.9067 \u0026 4.7.4143.0",
"product_id": "29"
}
},
{
"category": "product_version",
"name": "2.0.50727.9069 \u0026 3.0.30729.9067 \u0026 4.7.4143.0",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.7.2 2.0.50727.9069 \u0026 3.0.30729.9067 \u0026 4.7.4143.0",
"product_id": "11677-11572"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.7.2"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.8.4803.0",
"product": {
"name": "Microsoft .NET Framework 4.8 \u003c4.8.4803.0",
"product_id": "54"
}
},
{
"category": "product_version",
"name": "4.8.4803.0",
"product": {
"name": "Microsoft .NET Framework 4.8 4.8.4803.0",
"product_id": "11650-10816"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 4.8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c2.0.50727.9069 \u0026 3.0.30729.9067 \u0026 4.7.4143.0",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.7.2 \u003c2.0.50727.9069 \u0026 3.0.30729.9067 \u0026 4.7.4143.0",
"product_id": "30"
}
},
{
"category": "product_version",
"name": "2.0.50727.9069 \u0026 3.0.30729.9067 \u0026 4.7.4143.0",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.7.2 2.0.50727.9069 \u0026 3.0.30729.9067 \u0026 4.7.4143.0",
"product_id": "11677-10852"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.7.2"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c2.0.50727.9069 \u0026 3.0.30729.9067 \u0026 4.7.4143.0",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.7.2 \u003c2.0.50727.9069 \u0026 3.0.30729.9067 \u0026 4.7.4143.0",
"product_id": "31"
}
},
{
"category": "product_version",
"name": "2.0.50727.9069 \u0026 3.0.30729.9067 \u0026 4.7.4143.0",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.7.2 2.0.50727.9069 \u0026 3.0.30729.9067 \u0026 4.7.4143.0",
"product_id": "11677-11571"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.7.2"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c2.0.50727.9069 \u0026 3.0.30729.9067 \u0026 4.7.4143.0",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.7.2 \u003c2.0.50727.9069 \u0026 3.0.30729.9067 \u0026 4.7.4143.0",
"product_id": "32"
}
},
{
"category": "product_version",
"name": "2.0.50727.9069 \u0026 3.0.30729.9067 \u0026 4.7.4143.0",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.7.2 2.0.50727.9069 \u0026 3.0.30729.9067 \u0026 4.7.4143.0",
"product_id": "11677-10853"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.7.2"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c2.0.50727.9069 \u0026 3.0.30729.9067 \u0026 4.7.4143.0",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.7.2 \u003c2.0.50727.9069 \u0026 3.0.30729.9067 \u0026 4.7.4143.0",
"product_id": "33"
}
},
{
"category": "product_version",
"name": "2.0.50727.9069 \u0026 3.0.30729.9067 \u0026 4.7.4143.0",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.7.2 2.0.50727.9069 \u0026 3.0.30729.9067 \u0026 4.7.4143.0",
"product_id": "11677-10855"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.7.2"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c2.0.50727.9069 \u0026 3.0.30729.9067 \u0026 4.7.4143.0",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.7.2 \u003c2.0.50727.9069 \u0026 3.0.30729.9067 \u0026 4.7.4143.0",
"product_id": "34"
}
},
{
"category": "product_version",
"name": "2.0.50727.9069 \u0026 3.0.30729.9067 \u0026 4.7.4143.0",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.7.2 2.0.50727.9069 \u0026 3.0.30729.9067 \u0026 4.7.4143.0",
"product_id": "11677-10816"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.7.2"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.7.4143.0",
"product": {
"name": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 \u003c4.7.4143.0",
"product_id": "23"
}
},
{
"category": "product_version",
"name": "4.7.4143.0",
"product": {
"name": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 4.7.4143.0",
"product_id": "11863-10378"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.7.4143.0",
"product": {
"name": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 \u003c4.7.4143.0",
"product_id": "24"
}
},
{
"category": "product_version",
"name": "4.7.4143.0",
"product": {
"name": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 4.7.4143.0",
"product_id": "11863-10379"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.7.4143.0",
"product": {
"name": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 \u003c4.7.4143.0",
"product_id": "25"
}
},
{
"category": "product_version",
"name": "4.7.4143.0",
"product": {
"name": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 4.7.4143.0",
"product_id": "11863-10483"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.7.4143.0",
"product": {
"name": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 \u003c4.7.4143.0",
"product_id": "26"
}
},
{
"category": "product_version",
"name": "4.7.4143.0",
"product": {
"name": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 4.7.4143.0",
"product_id": "11863-10543"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.8.9340.0",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 \u003c4.8.9340.0",
"product_id": "6"
}
},
{
"category": "product_version",
"name": "4.8.9340.0",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 4.8.9340.0",
"product_id": "12079-11923"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8.1"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.8.9340.0",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 \u003c4.8.9340.0",
"product_id": "7"
}
},
{
"category": "product_version",
"name": "4.8.9340.0",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 4.8.9340.0",
"product_id": "12079-11924"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8.1"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.8.9340.0",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 \u003c4.8.9340.0",
"product_id": "8"
}
},
{
"category": "product_version",
"name": "4.8.9340.0",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 4.8.9340.0",
"product_id": "12079-11930"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8.1"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.8.9340.0",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 \u003c4.8.9340.0",
"product_id": "9"
}
},
{
"category": "product_version",
"name": "4.8.9340.0",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 4.8.9340.0",
"product_id": "12079-12097"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8.1"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.8.9340.0",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 \u003c4.8.9340.0",
"product_id": "10"
}
},
{
"category": "product_version",
"name": "4.8.9340.0",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 4.8.9340.0",
"product_id": "12079-11929"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8.1"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.8.9340.0",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 \u003c4.8.9340.0",
"product_id": "11"
}
},
{
"category": "product_version",
"name": "4.8.9340.0",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 4.8.9340.0",
"product_id": "12079-12098"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8.1"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.8.9340.0",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 \u003c4.8.9340.0",
"product_id": "12"
}
},
{
"category": "product_version",
"name": "4.8.9340.0",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 4.8.9340.0",
"product_id": "12079-11931"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8.1"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.8.9340.0",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 \u003c4.8.9340.0",
"product_id": "13"
}
},
{
"category": "product_version",
"name": "4.8.9340.0",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 4.8.9340.0",
"product_id": "12079-12099"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8.1"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.8.9340.0",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 \u003c4.8.9340.0",
"product_id": "14"
}
},
{
"category": "product_version",
"name": "4.8.9340.0",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 4.8.9340.0",
"product_id": "12079-20437"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8.1"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.8.9340.0",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 \u003c4.8.9340.0",
"product_id": "15"
}
},
{
"category": "product_version",
"name": "4.8.9340.0",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 4.8.9340.0",
"product_id": "12079-12243"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8.1"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.8.9340.0",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 \u003c4.8.9340.0",
"product_id": "16"
}
},
{
"category": "product_version",
"name": "4.8.9340.0",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 4.8.9340.0",
"product_id": "12079-12389"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8.1"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.8.9340.0",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 \u003c4.8.9340.0",
"product_id": "17"
}
},
{
"category": "product_version",
"name": "4.8.9340.0",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 4.8.9340.0",
"product_id": "12079-20438"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8.1"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.8.9340.0",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 \u003c4.8.9340.0",
"product_id": "18"
}
},
{
"category": "product_version",
"name": "4.8.9340.0",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 4.8.9340.0",
"product_id": "12079-12436"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8.1"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.8.9340.0",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 \u003c4.8.9340.0",
"product_id": "19"
}
},
{
"category": "product_version",
"name": "4.8.9340.0",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 4.8.9340.0",
"product_id": "12079-20854"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8.1"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.8.9340.0",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 \u003c4.8.9340.0",
"product_id": "20"
}
},
{
"category": "product_version",
"name": "4.8.9340.0",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 4.8.9340.0",
"product_id": "12079-12242"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8.1"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.8.9340.0",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 \u003c4.8.9340.0",
"product_id": "21"
}
},
{
"category": "product_version",
"name": "4.8.9340.0",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 4.8.9340.0",
"product_id": "12079-20853"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8.1"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.8.9340.0",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 \u003c4.8.9340.0",
"product_id": "22"
}
},
{
"category": "product_version",
"name": "4.8.9340.0",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 4.8.9340.0",
"product_id": "12079-12390"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8.1"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c2.0.50727.8983 \u0026 3.0.30729.8978",
"product": {
"name": "Microsoft .NET Framework 3.5 \u003c2.0.50727.8983 \u0026 3.0.30729.8978",
"product_id": "55"
}
},
{
"category": "product_version",
"name": "2.0.50727.8983 \u0026 3.0.30729.8978",
"product": {
"name": "Microsoft .NET Framework 3.5 2.0.50727.8983 \u0026 3.0.30729.8978",
"product_id": "2472-10378"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c2.0.50727.8983 \u0026 3.0.30729.8978",
"product": {
"name": "Microsoft .NET Framework 3.5 \u003c2.0.50727.8983 \u0026 3.0.30729.8978",
"product_id": "56"
}
},
{
"category": "product_version",
"name": "2.0.50727.8983 \u0026 3.0.30729.8978",
"product": {
"name": "Microsoft .NET Framework 3.5 2.0.50727.8983 \u0026 3.0.30729.8978",
"product_id": "2472-10543"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c2.0.50727.8983 \u0026 3.0.30729.8978",
"product": {
"name": "Microsoft .NET Framework 3.5 \u003c2.0.50727.8983 \u0026 3.0.30729.8978",
"product_id": "57"
}
},
{
"category": "product_version",
"name": "2.0.50727.8983 \u0026 3.0.30729.8978",
"product": {
"name": "Microsoft .NET Framework 3.5 2.0.50727.8983 \u0026 3.0.30729.8978",
"product_id": "2472-10379"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c2.0.50727.8983 \u0026 3.0.30729.8978",
"product": {
"name": "Microsoft .NET Framework 3.5 \u003c2.0.50727.8983 \u0026 3.0.30729.8978",
"product_id": "58"
}
},
{
"category": "product_version",
"name": "2.0.50727.8983 \u0026 3.0.30729.8978",
"product": {
"name": "Microsoft .NET Framework 3.5 2.0.50727.8983 \u0026 3.0.30729.8978",
"product_id": "2472-10483"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-50650",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"notes": [
{
"category": "general",
"text": "Microsoft",
"title": "Assigning CNA"
},
{
"category": "faq",
"text": "An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.",
"title": "What privileges could be gained by an attacker who successfully exploited this vulnerability?"
}
],
"product_status": {
"fixed": [
"11650-10378",
"11650-10379",
"11650-10483",
"11650-10543",
"11650-10816",
"11650-10852",
"11650-10853",
"11650-10855",
"11676-11568",
"11676-11569",
"11676-11571",
"11676-11572",
"11676-11923",
"11676-11924",
"11676-11929",
"11676-11930",
"11676-11931",
"11676-12097",
"11676-12098",
"11676-12099",
"11677-10816",
"11677-10852",
"11677-10853",
"11677-10855",
"11677-11568",
"11677-11569",
"11677-11571",
"11677-11572",
"11863-10378",
"11863-10379",
"11863-10483",
"11863-10543",
"12079-11923",
"12079-11924",
"12079-11929",
"12079-11930",
"12079-11931",
"12079-12097",
"12079-12098",
"12079-12099",
"12079-12242",
"12079-12243",
"12079-12389",
"12079-12390",
"12079-12436",
"12079-20437",
"12079-20438",
"12079-20853",
"12079-20854",
"12414",
"12434",
"12459",
"16767",
"21581",
"2472-10378",
"2472-10379",
"2472-10483",
"2472-10543"
],
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"6",
"7",
"8",
"9",
"10",
"11",
"12",
"13",
"14",
"15",
"16",
"17",
"18",
"19",
"20",
"21",
"22",
"23",
"24",
"25",
"26",
"27",
"28",
"29",
"30",
"31",
"32",
"33",
"34",
"35",
"36",
"37",
"38",
"39",
"40",
"41",
"42",
"43",
"44",
"45",
"46",
"47",
"48",
"49",
"50",
"51",
"52",
"53",
"54",
"55",
"56",
"57",
"58"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-50650 .NET Framework Elevation of Privilege Vulnerability - HTML",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50650"
},
{
"category": "self",
"summary": "CVE-2026-50650 .NET Framework Elevation of Privilege Vulnerability - CSAF",
"url": "https://msrc.microsoft.com/csaf/advisories/2026/msrc_cve-2026-50650.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-14T07:00:00.000Z",
"details": "8.0.29:Security Update:https://support.microsoft.com/kb/5104032",
"product_ids": [
"5"
],
"url": "https://support.microsoft.com/kb/5104032"
},
{
"category": "vendor_fix",
"date": "2026-07-14T07:00:00.000Z",
"details": "9.0.18:Security Update:https://support.microsoft.com/kb/5104033",
"product_ids": [
"4"
],
"url": "https://support.microsoft.com/kb/5104033"
},
{
"category": "vendor_fix",
"date": "2026-07-14T07:00:00.000Z",
"details": "18.7.4:Security Update:https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-notes",
"product_ids": [
"1"
],
"url": "https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-notes"
},
{
"category": "vendor_fix",
"date": "2026-07-14T07:00:00.000Z",
"details": "17.12.22:Security Update:https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes",
"product_ids": [
"3"
],
"url": "https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes"
},
{
"category": "vendor_fix",
"date": "2026-07-14T07:00:00.000Z",
"details": "17.14.36:Security Update:https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes",
"product_ids": [
"2"
],
"url": "https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes"
},
{
"category": "vendor_fix",
"date": "2026-07-14T07:00:00.000Z",
"details": "4.8.4803.0:Security Update:https://support.microsoft.com/help/5101009",
"product_ids": [
"47",
"48"
],
"url": "https://support.microsoft.com/help/5101009"
},
{
"category": "vendor_fix",
"date": "2026-07-14T07:00:00.000Z",
"details": "4.8.4803.0:Security Update:https://support.microsoft.com/help/5101011",
"product_ids": [
"49",
"51"
],
"url": "https://support.microsoft.com/help/5101011"
},
{
"category": "vendor_fix",
"date": "2026-07-14T07:00:00.000Z",
"details": "4.8.4803.0:Security Update:https://support.microsoft.com/help/5101007",
"product_ids": [
"50",
"52",
"53",
"54"
],
"url": "https://support.microsoft.com/help/5101007"
},
{
"category": "vendor_fix",
"date": "2026-07-14T07:00:00.000Z",
"details": "2.0.50727.9069 \u0026 3.0.30729.9067 \u0026 4.8.4803.0:Security Update:https://support.microsoft.com/help/5101008",
"product_ids": [
"35",
"36",
"37",
"38"
],
"url": "https://support.microsoft.com/help/5101008"
},
{
"category": "vendor_fix",
"date": "2026-07-14T07:00:00.000Z",
"details": "2.0.50727.9182 \u0026 3.0.30729.9168 \u0026 4.8.4803.0:Security Update:https://support.microsoft.com/help/5101010",
"product_ids": [
"39",
"40"
],
"url": "https://support.microsoft.com/help/5101010"
},
{
"category": "vendor_fix",
"date": "2026-07-14T07:00:00.000Z",
"details": "2.0.50727.9182 \u0026 3.0.30729.9168 \u0026 4.8.4803.0:Security Update:https://support.microsoft.com/help/5101006",
"product_ids": [
"41",
"42",
"43",
"44",
"45",
"46"
],
"url": "https://support.microsoft.com/help/5101006"
},
{
"category": "vendor_fix",
"date": "2026-07-14T07:00:00.000Z",
"details": "2.0.50727.9069 \u0026 3.0.30729.9067 \u0026 4.7.4143.0:Security Update:https://support.microsoft.com/help/5100989",
"product_ids": [
"27",
"28",
"29",
"31"
],
"url": "https://support.microsoft.com/help/5100989"
},
{
"category": "vendor_fix",
"date": "2026-07-14T07:00:00.000Z",
"details": "2.0.50727.8983 \u0026 3.0.30729.8978 \u0026 4.7.4143.0:Security Update:https://support.microsoft.com/help/5099535",
"product_ids": [
"30",
"32",
"33",
"34"
],
"url": "https://support.microsoft.com/help/5099535"
},
{
"category": "vendor_fix",
"date": "2026-07-14T07:00:00.000Z",
"details": "4.7.4143.0:Security Update:https://support.microsoft.com/help/5100990",
"product_ids": [
"23",
"24"
],
"url": "https://support.microsoft.com/help/5100990"
},
{
"category": "vendor_fix",
"date": "2026-07-14T07:00:00.000Z",
"details": "4.7.4143.0:Security Update:https://support.microsoft.com/help/5100991",
"product_ids": [
"25",
"26"
],
"url": "https://support.microsoft.com/help/5100991"
},
{
"category": "vendor_fix",
"date": "2026-07-14T07:00:00.000Z",
"details": "2.0.50727.9182 \u0026 3.0.30729.9168 \u0026 4.8.9339.0:Security Update:https://support.microsoft.com/help/5101005",
"product_ids": [
"6",
"7"
],
"url": "https://support.microsoft.com/help/5101005"
},
{
"category": "vendor_fix",
"date": "2026-07-14T07:00:00.000Z",
"details": "2.0.50727.9182 \u0026 3.0.30729.9168 \u0026 4.8.9339.0:Security Update:https://support.microsoft.com/help/5101000",
"product_ids": [
"8",
"9",
"10",
"11",
"12",
"13"
],
"url": "https://support.microsoft.com/help/5101000"
},
{
"category": "vendor_fix",
"date": "2026-07-14T07:00:00.000Z",
"details": "2.0.50727.9182 \u0026 3.0.30729.9168 \u0026 4.8.9340.0:Security Update:https://support.microsoft.com/help/5100998",
"product_ids": [
"14",
"17"
],
"url": "https://support.microsoft.com/help/5100998"
},
{
"category": "vendor_fix",
"date": "2026-07-14T07:00:00.000Z",
"details": "2.0.50727.9182 \u0026 3.0.30729.9168 \u0026 4.8.9339.0:Security Update:https://support.microsoft.com/help/5101004",
"product_ids": [
"15",
"20"
],
"url": "https://support.microsoft.com/help/5101004"
},
{
"category": "vendor_fix",
"date": "2026-07-14T07:00:00.000Z",
"details": "2.0.50727.9182 \u0026 3.0.30729.9168 \u0026 4.8.9339.0:Security Update:https://support.microsoft.com/help/5101001",
"product_ids": [
"16",
"22"
],
"url": "https://support.microsoft.com/help/5101001"
},
{
"category": "vendor_fix",
"date": "2026-07-14T07:00:00.000Z",
"details": "2.0.50727.9182 \u0026 3.0.30729.9168 \u0026 4.8.9340.0:Security Update:https://support.microsoft.com/help/5101003",
"product_ids": [
"18"
],
"url": "https://support.microsoft.com/help/5101003"
},
{
"category": "vendor_fix",
"date": "2026-07-14T07:00:00.000Z",
"details": "2.0.50727.9182 \u0026 3.0.30729.9168:Security Update:https://support.microsoft.com/help/5101014",
"product_ids": [
"19",
"21"
],
"url": "https://support.microsoft.com/help/5101014"
},
{
"category": "vendor_fix",
"date": "2026-07-14T07:00:00.000Z",
"details": "4.8.9340.0:Security Update:https://support.microsoft.com/help/5101002",
"product_ids": [
"19",
"21"
],
"url": "https://support.microsoft.com/help/5101002"
},
{
"category": "vendor_fix",
"date": "2026-07-14T07:00:00.000Z",
"details": "2.0.50727.8983 \u0026 3.0.30729.8978:Security Update:https://support.microsoft.com/help/5100984",
"product_ids": [
"55",
"57"
],
"url": "https://support.microsoft.com/help/5100984"
},
{
"category": "vendor_fix",
"date": "2026-07-14T07:00:00.000Z",
"details": "2.0.50727.8983 \u0026 3.0.30729.8978:Security Update:https://support.microsoft.com/help/5100985",
"product_ids": [
"56",
"58"
],
"url": "https://support.microsoft.com/help/5100985"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"environmentalScore": 0.0,
"exploitCodeMaturity": "UNPROVEN",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"remediationLevel": "OFFICIAL_FIX",
"reportConfidence": "CONFIRMED",
"scope": "UNCHANGED",
"temporalScore": 6.8,
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"6",
"7",
"8",
"9",
"10",
"11",
"12",
"13",
"14",
"15",
"16",
"17",
"18",
"19",
"20",
"21",
"22",
"23",
"24",
"25",
"26",
"27",
"28",
"29",
"30",
"31",
"32",
"33",
"34",
"35",
"36",
"37",
"38",
"39",
"40",
"41",
"42",
"43",
"44",
"45",
"46",
"47",
"48",
"49",
"50",
"51",
"52",
"53",
"54",
"55",
"56",
"57",
"58"
]
}
],
"threats": [
{
"category": "impact",
"details": "Elevation of Privilege"
},
{
"category": "exploit_status",
"details": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely"
}
],
"title": ".NET Framework Elevation of Privilege Vulnerability"
}
]
}
NCSC-2026-0235
Vulnerability from csaf_ncscnl - Published: 2026-07-14 18:37 - Updated: 2026-07-14 18:37Summary
Kwetsbaarheden verholpen in Microsoft Developer Tools
Notes
The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:
NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.
NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.
This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings.
Feiten: Microsoft heeft kwetsbaarheden verholpen in Developer Tools als .NET en Visual Studio.
Interpretaties: Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot schade uit de categorieën zoals genoemd in bijgevoegde tabel.
Voor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bronbestand te openen en verwerken in de ontwikkelomgeving.
```
Visual Studio:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-47305 | 7.80 | Uitvoeren van willekeurige code |
|----------------|------|-------------------------------------|
GitHub Copilot and Visual Studio Code:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-47282 | 6.50 | Toegang tot gevoelige gegevens |
|----------------|------|-------------------------------------|
Visual Studio Code:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-45496 | 5.50 | Omzeilen van beveiligingsmaatregel |
| CVE-2026-50520 | 8.40 | Uitvoeren van willekeurige code |
| CVE-2026-57101 | 7.10 | Omzeilen van beveiligingsmaatregel |
| CVE-2026-57102 | 8.80 | Omzeilen van beveiligingsmaatregel |
|----------------|------|-------------------------------------|
.NET Framework:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-50524 | 7.50 | Denial-of-Service |
| CVE-2026-50527 | 7.50 | Denial-of-Service |
| CVE-2026-50646 | 7.80 | Uitvoeren van willekeurige code |
| CVE-2026-50648 | 7.50 | Denial-of-Service |
| CVE-2026-50650 | 7.80 | Uitvoeren van willekeurige code |
|----------------|------|-------------------------------------|
ASP.NET Core:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-47300 | 8.80 | Verkrijgen van verhoogde rechten |
| CVE-2026-47303 | 8.80 | Verkrijgen van verhoogde rechten |
| CVE-2026-50506 | 7.50 | Denial-of-Service |
| CVE-2026-56170 | 7.50 | Denial-of-Service |
| CVE-2026-45646 | 7.50 | Denial-of-Service |
|----------------|------|-------------------------------------|
.NET:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-47302 | 7.50 | Denial-of-Service |
| CVE-2026-47304 | 8.10 | Omzeilen van beveiligingsmaatregel |
| CVE-2026-50525 | 7.50 | Denial-of-Service |
| CVE-2026-50526 | 7.00 | Manipulatie van gegevens |
| CVE-2026-50528 | 8.20 | Omzeilen van beveiligingsmaatregel |
| CVE-2026-50649 | 7.80 | Uitvoeren van willekeurige code |
| CVE-2026-50651 | 7.50 | Denial-of-Service |
| CVE-2026-50659 | 6.50 | Voordoen als andere gebruiker |
|----------------|------|-------------------------------------|
.NET Core:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-57108 | 7.50 | Denial-of-Service |
|----------------|------|-------------------------------------|
GitHub Copilot and Visual Studio:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-41109 | 8.80 | Omzeilen van beveiligingsmaatregel |
|----------------|------|-------------------------------------|
```
Oplossingen: Microsoft heeft updates beschikbaar gesteld waarmee de beschreven kwetsbaarheden worden verholpen. We raden u aan om deze updates te installeren. Meer informatie over de kwetsbaarheden, de installatie van de updates en eventuele work-arounds vindt u op:
https://portal.msrc.microsoft.com/en-us/security-guidance
Kans: medium
Schade: high
CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
An incorrect implementation of the authentication algorithm in ASP.NET Core allows an authorized attacker to remotely elevate privileges, posing a significant security risk.
CWE-303 - Incorrect Implementation of Authentication AlgorithmAffected products
Known affected
22 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Microsoft / .NET
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET Framework
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Azure
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft Visual Studio 2022 version 17.14
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft Visual Studio Code
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft Visual Studio Code CoPilot Chat Extension
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft.AspNet.OData
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft.AspNetCore.OData
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2017
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2019
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2022
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2026
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio Code
|
vers:unknown/* |
Unrestricted resource allocation in .NET can allow unauthorized attackers to exploit the system, resulting in a denial of service over a network.
CWE-770 - Allocation of Resources Without Limits or ThrottlingAffected products
Known affected
22 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Microsoft / .NET
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET Framework
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Azure
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft Visual Studio 2022 version 17.14
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft Visual Studio Code
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft Visual Studio Code CoPilot Chat Extension
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft.AspNet.OData
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft.AspNetCore.OData
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2017
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2019
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2022
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2026
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio Code
|
vers:unknown/* |
An authentication bypass vulnerability in ASP.NET Core involving assumed-immutable data allows an authorized attacker to remotely elevate privileges.
CWE-302 - Authentication Bypass by Assumed-Immutable DataAffected products
Known affected
22 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Microsoft / .NET
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET Framework
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Azure
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft Visual Studio 2022 version 17.14
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft Visual Studio Code
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft Visual Studio Code CoPilot Chat Extension
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft.AspNet.OData
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft.AspNetCore.OData
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2017
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2019
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2022
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2026
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio Code
|
vers:unknown/* |
An input validation flaw in the .NET Framework allows unauthorized attackers to trigger a denial of service condition remotely over a network.
CWE-1287 - Improper Validation of Specified Type of InputAffected products
Known affected
22 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Microsoft / .NET
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET Framework
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Azure
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft Visual Studio 2022 version 17.14
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft Visual Studio Code
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft Visual Studio Code CoPilot Chat Extension
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft.AspNet.OData
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft.AspNetCore.OData
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2017
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2019
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2022
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2026
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio Code
|
vers:unknown/* |
An allocation of resources without limits or throttling in ASP.NET Core enables unauthorized attackers to perform denial of service attacks over a network.
7.5 (High)
Affected products
Known affected
22 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Microsoft / .NET
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET Framework
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Azure
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft Visual Studio 2022 version 17.14
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft Visual Studio Code
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft Visual Studio Code CoPilot Chat Extension
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft.AspNet.OData
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft.AspNetCore.OData
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2017
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2019
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2022
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2026
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio Code
|
vers:unknown/* |
Improper verification of cryptographic signatures in the .NET framework allows unauthorized attackers to bypass security mechanisms over a network, potentially compromising application integrity and security.
CWE-347 - Improper Verification of Cryptographic SignatureAffected products
Known affected
22 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Microsoft / .NET
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET Framework
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Azure
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft Visual Studio 2022 version 17.14
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft Visual Studio Code
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft Visual Studio Code CoPilot Chat Extension
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft.AspNet.OData
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft.AspNetCore.OData
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2017
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2019
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2022
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2026
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio Code
|
vers:unknown/* |
Unrestricted resource allocation in .NET can allow unauthorized attackers to exploit the system, resulting in a denial of service over a network.
CWE-770 - Allocation of Resources Without Limits or ThrottlingAffected products
Known affected
22 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Microsoft / .NET
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET Framework
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Azure
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft Visual Studio 2022 version 17.14
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft Visual Studio Code
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft Visual Studio Code CoPilot Chat Extension
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft.AspNet.OData
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft.AspNetCore.OData
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2017
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2019
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2022
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2026
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio Code
|
vers:unknown/* |
An improper link resolution vulnerability in the .NET framework permits an authorized local attacker to tamper with files, potentially compromising system integrity.
CWE-59 - Improper Link Resolution Before File Access ('Link Following')Affected products
Known affected
22 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Microsoft / .NET
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET Framework
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Azure
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft Visual Studio 2022 version 17.14
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft Visual Studio Code
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft Visual Studio Code CoPilot Chat Extension
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft.AspNet.OData
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft.AspNetCore.OData
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2017
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2019
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2022
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2026
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio Code
|
vers:unknown/* |
A stack-based buffer overflow vulnerability in the .NET Framework allows unauthorized attackers to cause a denial of service over a network, impacting system stability and availability.
CWE-121 - Stack-based Buffer OverflowAffected products
Known affected
22 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Microsoft / .NET
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET Framework
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Azure
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft Visual Studio 2022 version 17.14
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft Visual Studio Code
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft Visual Studio Code CoPilot Chat Extension
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft.AspNet.OData
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft.AspNetCore.OData
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2017
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2019
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2022
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2026
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio Code
|
vers:unknown/* |
An incorrect authorization vulnerability in the .NET framework allows remote attackers to bypass security controls, potentially leading to unauthorized access.
CWE-302 - Authentication Bypass by Assumed-Immutable DataAffected products
Known affected
22 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Microsoft / .NET
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET Framework
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Azure
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft Visual Studio 2022 version 17.14
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft Visual Studio Code
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft Visual Studio Code CoPilot Chat Extension
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft.AspNet.OData
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft.AspNetCore.OData
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2017
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2019
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2022
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2026
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio Code
|
vers:unknown/* |
An unthrottled resource allocation vulnerability in the .NET Framework allows an unauthorized attacker to cause a denial of service over a network by exhausting system resources.
CWE-770 - Allocation of Resources Without Limits or ThrottlingAffected products
Known affected
22 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Microsoft / .NET
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET Framework
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Azure
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft Visual Studio 2022 version 17.14
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft Visual Studio Code
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft Visual Studio Code CoPilot Chat Extension
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft.AspNet.OData
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft.AspNetCore.OData
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2017
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2019
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2022
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2026
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio Code
|
vers:unknown/* |
Unrestricted resource allocation in .NET can allow unauthorized attackers to exploit the system, resulting in a denial of service over a network.
CWE-770 - Allocation of Resources Without Limits or ThrottlingAffected products
Known affected
22 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Microsoft / .NET
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET Framework
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Azure
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft Visual Studio 2022 version 17.14
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft Visual Studio Code
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft Visual Studio Code CoPilot Chat Extension
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft.AspNet.OData
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft.AspNetCore.OData
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2017
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2019
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2022
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2026
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio Code
|
vers:unknown/* |
Improper encoding or escaping of output in .NET can allow an authorized attacker to perform network spoofing by manipulating network communications.
CWE-116 - Improper Encoding or Escaping of OutputAffected products
Known affected
22 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Microsoft / .NET
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET Framework
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Azure
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft Visual Studio 2022 version 17.14
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft Visual Studio Code
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft Visual Studio Code CoPilot Chat Extension
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft.AspNet.OData
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft.AspNetCore.OData
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2017
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2019
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2022
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2026
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio Code
|
vers:unknown/* |
A type confusion vulnerability in .NET Core allows unauthorized attackers to cause a denial of service by accessing resources using incompatible types over a network.
CWE-843 - Access of Resource Using Incompatible Type ('Type Confusion')Affected products
Known affected
22 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Microsoft / .NET
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET Framework
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Azure
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft Visual Studio 2022 version 17.14
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft Visual Studio Code
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft Visual Studio Code CoPilot Chat Extension
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft.AspNet.OData
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft.AspNetCore.OData
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2017
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2019
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2022
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2026
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio Code
|
vers:unknown/* |
A protection mechanism failure in the .NET Framework allows an attacker to execute unauthorized local code, posing a significant security risk.
CWE-502 - Deserialization of Untrusted DataAffected products
Known affected
22 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Microsoft / .NET
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET Framework
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Azure
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft Visual Studio 2022 version 17.14
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft Visual Studio Code
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft Visual Studio Code CoPilot Chat Extension
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft.AspNet.OData
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft.AspNetCore.OData
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2017
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2019
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2022
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2026
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio Code
|
vers:unknown/* |
Deserialization of untrusted data in .NET environments can allow unauthorized attackers to execute arbitrary code locally, posing significant security risks.
CWE-502 - Deserialization of Untrusted DataAffected products
Known affected
22 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Microsoft / .NET
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET Framework
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Azure
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft Visual Studio 2022 version 17.14
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft Visual Studio Code
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft Visual Studio Code CoPilot Chat Extension
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft.AspNet.OData
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft.AspNetCore.OData
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2017
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2019
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2022
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2026
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio Code
|
vers:unknown/* |
A vulnerability in the .NET Framework's code generation control allows unauthorized local privilege escalation by improper handling of code execution permissions.
CWE-94 - Improper Control of Generation of Code ('Code Injection')Affected products
Known affected
22 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Microsoft / .NET
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET Framework
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Azure
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft Visual Studio 2022 version 17.14
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft Visual Studio Code
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft Visual Studio Code CoPilot Chat Extension
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft.AspNet.OData
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft.AspNetCore.OData
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2017
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2019
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2022
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2026
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio Code
|
vers:unknown/* |
An allocation of resources without limits or throttling in ASP.NET Core enables unauthorized attackers to perform denial of service attacks over a network.
CWE-770 - Allocation of Resources Without Limits or ThrottlingAffected products
Known affected
22 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Microsoft / .NET
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET Framework
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Azure
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft Visual Studio 2022 version 17.14
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft Visual Studio Code
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft Visual Studio Code CoPilot Chat Extension
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft.AspNet.OData
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft.AspNetCore.OData
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2017
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2019
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2022
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2026
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio Code
|
vers:unknown/* |
An allocation of resources without limits or throttling in ASP.NET Core enables unauthorized attackers to perform denial of service attacks over a network.
7.5 (High)
Affected products
Known affected
22 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Microsoft / .NET
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET Framework
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Azure
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft Visual Studio 2022 version 17.14
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft Visual Studio Code
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft Visual Studio Code CoPilot Chat Extension
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft.AspNet.OData
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft.AspNetCore.OData
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2017
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2019
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2022
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2026
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio Code
|
vers:unknown/* |
Insufficiently protected credentials in GitHub Copilot and Visual Studio Code allow unauthorized attackers to disclose sensitive information over a network.
6.5 (Medium)
Affected products
Known affected
22 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Microsoft / .NET
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET Framework
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Azure
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft Visual Studio 2022 version 17.14
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft Visual Studio Code
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft Visual Studio Code CoPilot Chat Extension
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft.AspNet.OData
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft.AspNetCore.OData
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2017
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2019
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2022
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2026
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio Code
|
vers:unknown/* |
A path traversal vulnerability in Visual Studio Code allows unauthorized local attackers to bypass security restrictions by improperly limiting pathnames to restricted directories.
5.5 (Medium)
Affected products
Known affected
22 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Microsoft / .NET
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET Framework
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Azure
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft Visual Studio 2022 version 17.14
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft Visual Studio Code
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft Visual Studio Code CoPilot Chat Extension
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft.AspNet.OData
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft.AspNetCore.OData
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2017
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2019
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2022
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2026
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio Code
|
vers:unknown/* |
Improper neutralization of special elements in commands within Visual Studio Code can allow unauthorized local code execution by attackers.
8.4 (High)
Affected products
Known affected
22 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Microsoft / .NET
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET Framework
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Azure
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft Visual Studio 2022 version 17.14
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft Visual Studio Code
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft Visual Studio Code CoPilot Chat Extension
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft.AspNet.OData
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft.AspNetCore.OData
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2017
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2019
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2022
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2026
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio Code
|
vers:unknown/* |
Improper neutralization of special elements in output by GitHub Copilot and Visual Studio enables unauthorized attackers to bypass security features over a network via injection vulnerabilities.
Affected products
Known affected
22 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Microsoft / .NET
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET Framework
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Azure
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft Visual Studio 2022 version 17.14
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft Visual Studio Code
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft Visual Studio Code CoPilot Chat Extension
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft.AspNet.OData
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft.AspNetCore.OData
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2017
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2019
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2022
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2026
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio Code
|
vers:unknown/* |
An input neutralization flaw in Visual Studio Code's web page generation allows a local unauthorized attacker to bypass security features.
CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Affected products
Known affected
22 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Microsoft / .NET
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET Framework
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Azure
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft Visual Studio 2022 version 17.14
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft Visual Studio Code
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft Visual Studio Code CoPilot Chat Extension
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft.AspNet.OData
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft.AspNetCore.OData
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2017
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2019
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2022
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2026
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio Code
|
vers:unknown/* |
A vulnerability in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network by including functionality from an untrusted control sphere.
CWE-829 - Inclusion of Functionality from Untrusted Control SphereAffected products
Known affected
22 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Microsoft / .NET
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET Framework
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Azure
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft Visual Studio 2022 version 17.14
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft Visual Studio Code
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft Visual Studio Code CoPilot Chat Extension
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft.AspNet.OData
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft.AspNetCore.OData
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2017
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2019
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2022
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2026
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio Code
|
vers:unknown/* |
A protection mechanism failure in Visual Studio allows an attacker to execute unauthorized local code, posing a significant security risk.
Affected products
Known affected
22 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Microsoft / .NET
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET Framework
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Azure
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft Visual Studio 2022 version 17.14
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft Visual Studio Code
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft Visual Studio Code CoPilot Chat Extension
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft.AspNet.OData
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft.AspNetCore.OData
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2017
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2019
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2022
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio 2026
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio Code
|
vers:unknown/* |
References
26 references
| URL | Category |
|---|---|
| https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… | self |
{
"document": {
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE"
}
},
"lang": "nl",
"notes": [
{
"category": "legal_disclaimer",
"text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
},
{
"category": "description",
"text": "Microsoft heeft kwetsbaarheden verholpen in Developer Tools als .NET en Visual Studio.",
"title": "Feiten"
},
{
"category": "description",
"text": "Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot schade uit de categorie\u00ebn zoals genoemd in bijgevoegde tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bronbestand te openen en verwerken in de ontwikkelomgeving.\n\n```\nVisual Studio: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-47305 | 7.80 | Uitvoeren van willekeurige code | \n|----------------|------|-------------------------------------|\n\nGitHub Copilot and Visual Studio Code: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-47282 | 6.50 | Toegang tot gevoelige gegevens | \n|----------------|------|-------------------------------------|\n\nVisual Studio Code: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-45496 | 5.50 | Omzeilen van beveiligingsmaatregel | \n| CVE-2026-50520 | 8.40 | Uitvoeren van willekeurige code | \n| CVE-2026-57101 | 7.10 | Omzeilen van beveiligingsmaatregel | \n| CVE-2026-57102 | 8.80 | Omzeilen van beveiligingsmaatregel | \n|----------------|------|-------------------------------------|\n\n.NET Framework: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-50524 | 7.50 | Denial-of-Service | \n| CVE-2026-50527 | 7.50 | Denial-of-Service | \n| CVE-2026-50646 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-50648 | 7.50 | Denial-of-Service | \n| CVE-2026-50650 | 7.80 | Uitvoeren van willekeurige code | \n|----------------|------|-------------------------------------|\n\nASP.NET Core: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-47300 | 8.80 | Verkrijgen van verhoogde rechten | \n| CVE-2026-47303 | 8.80 | Verkrijgen van verhoogde rechten | \n| CVE-2026-50506 | 7.50 | Denial-of-Service | \n| CVE-2026-56170 | 7.50 | Denial-of-Service | \n| CVE-2026-45646 | 7.50 | Denial-of-Service | \n|----------------|------|-------------------------------------|\n\n.NET: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-47302 | 7.50 | Denial-of-Service | \n| CVE-2026-47304 | 8.10 | Omzeilen van beveiligingsmaatregel | \n| CVE-2026-50525 | 7.50 | Denial-of-Service | \n| CVE-2026-50526 | 7.00 | Manipulatie van gegevens | \n| CVE-2026-50528 | 8.20 | Omzeilen van beveiligingsmaatregel | \n| CVE-2026-50649 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-50651 | 7.50 | Denial-of-Service | \n| CVE-2026-50659 | 6.50 | Voordoen als andere gebruiker | \n|----------------|------|-------------------------------------|\n\n.NET Core: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-57108 | 7.50 | Denial-of-Service | \n|----------------|------|-------------------------------------|\n\nGitHub Copilot and Visual Studio: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-41109 | 8.80 | Omzeilen van beveiligingsmaatregel | \n|----------------|------|-------------------------------------|\n\n```\n",
"title": "Interpretaties"
},
{
"category": "description",
"text": "Microsoft heeft updates beschikbaar gesteld waarmee de beschreven kwetsbaarheden worden verholpen. We raden u aan om deze updates te installeren. Meer informatie over de kwetsbaarheden, de installatie van de updates en eventuele work-arounds vindt u op:\n\nhttps://portal.msrc.microsoft.com/en-us/security-guidance",
"title": "Oplossingen"
},
{
"category": "general",
"text": "medium",
"title": "Kans"
},
{
"category": "general",
"text": "high",
"title": "Schade"
},
{
"category": "general",
"text": "Exposure of Sensitive Information to an Unauthorized Actor",
"title": "CWE-200"
}
],
"publisher": {
"category": "coordinator",
"contact_details": "cert@ncsc.nl",
"name": "Nationaal Cyber Security Centrum",
"namespace": "https://www.ncsc.nl/"
},
"title": "Kwetsbaarheden verholpen in Microsoft Developer Tools",
"tracking": {
"current_release_date": "2026-07-14T18:37:02.554035Z",
"generator": {
"date": "2025-08-04T16:30:00Z",
"engine": {
"name": "V.A.",
"version": "1.3"
}
},
"id": "NCSC-2026-0235",
"initial_release_date": "2026-07-14T18:37:02.554035Z",
"revision_history": [
{
"date": "2026-07-14T18:37:02.554035Z",
"number": "1.0.0",
"summary": "Initiele versie"
}
],
"status": "final",
"version": "1.0.0"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-1"
}
}
],
"category": "product_name",
"name": ".NET"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-2"
}
}
],
"category": "product_name",
"name": ".NET 10.0 installed on Linux"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-3"
}
}
],
"category": "product_name",
"name": ".NET 10.0 installed on Mac OS"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-4"
}
}
],
"category": "product_name",
"name": ".NET 10.0 installed on Windows"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-5"
}
}
],
"category": "product_name",
"name": ".NET 8.0 installed on Linux"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-6"
}
}
],
"category": "product_name",
"name": ".NET 8.0 installed on Mac OS"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-7"
}
}
],
"category": "product_name",
"name": ".NET 8.0 installed on Windows"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-8"
}
}
],
"category": "product_name",
"name": ".NET 9.0 installed on Linux"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-9"
}
}
],
"category": "product_name",
"name": ".NET 9.0 installed on Mac OS"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-10"
}
}
],
"category": "product_name",
"name": ".NET 9.0 installed on Windows"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-11"
}
}
],
"category": "product_name",
"name": ".NET Framework"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-12"
}
}
],
"category": "product_name",
"name": "Azure"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-13"
}
}
],
"category": "product_name",
"name": "Microsoft Visual Studio 2022 version 17.14"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-14"
}
}
],
"category": "product_name",
"name": "Microsoft Visual Studio Code"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-15"
}
}
],
"category": "product_name",
"name": "Microsoft Visual Studio Code CoPilot Chat Extension"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-16"
}
}
],
"category": "product_name",
"name": "Microsoft.AspNet.OData"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-17"
}
}
],
"category": "product_name",
"name": "Microsoft.AspNetCore.OData"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-18"
}
}
],
"category": "product_name",
"name": "Visual Studio 2017"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-19"
}
}
],
"category": "product_name",
"name": "Visual Studio 2019"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-20"
}
}
],
"category": "product_name",
"name": "Visual Studio 2022"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-21"
}
}
],
"category": "product_name",
"name": "Visual Studio 2026"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-22"
}
}
],
"category": "product_name",
"name": "Visual Studio Code"
}
],
"category": "vendor",
"name": "Microsoft"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-47300",
"cwe": {
"id": "CWE-303",
"name": "Incorrect Implementation of Authentication Algorithm"
},
"notes": [
{
"category": "other",
"text": "Incorrect Implementation of Authentication Algorithm",
"title": "CWE-303"
},
{
"category": "description",
"text": "An incorrect implementation of the authentication algorithm in ASP.NET Core allows an authorized attacker to remotely elevate privileges, posing a significant security risk.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-47300 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-47300.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22"
]
}
],
"title": "CVE-2026-47300"
},
{
"cve": "CVE-2026-47302",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"notes": [
{
"category": "other",
"text": "Allocation of Resources Without Limits or Throttling",
"title": "CWE-770"
},
{
"category": "description",
"text": "Unrestricted resource allocation in .NET can allow unauthorized attackers to exploit the system, resulting in a denial of service over a network.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-47302 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-47302.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22"
]
}
],
"title": "CVE-2026-47302"
},
{
"cve": "CVE-2026-47303",
"cwe": {
"id": "CWE-302",
"name": "Authentication Bypass by Assumed-Immutable Data"
},
"notes": [
{
"category": "other",
"text": "Authentication Bypass by Assumed-Immutable Data",
"title": "CWE-302"
},
{
"category": "other",
"text": "Incorrect Authorization",
"title": "CWE-863"
},
{
"category": "other",
"text": "Improper Neutralization of Special Elements used in an LDAP Query (\u0027LDAP Injection\u0027)",
"title": "CWE-90"
},
{
"category": "description",
"text": "An authentication bypass vulnerability in ASP.NET Core involving assumed-immutable data allows an authorized attacker to remotely elevate privileges.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-47303 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-47303.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22"
]
}
],
"title": "CVE-2026-47303"
},
{
"cve": "CVE-2026-50524",
"cwe": {
"id": "CWE-1287",
"name": "Improper Validation of Specified Type of Input"
},
"notes": [
{
"category": "other",
"text": "Improper Validation of Specified Type of Input",
"title": "CWE-1287"
},
{
"category": "description",
"text": "An input validation flaw in the .NET Framework allows unauthorized attackers to trigger a denial of service condition remotely over a network.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-50524 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-50524.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22"
]
}
],
"title": "CVE-2026-50524"
},
{
"cve": "CVE-2026-56170",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"notes": [
{
"category": "other",
"text": "Allocation of Resources Without Limits or Throttling",
"title": "CWE-770"
},
{
"category": "description",
"text": "An allocation of resources without limits or throttling in ASP.NET Core enables unauthorized attackers to perform denial of service attacks over a network.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-56170 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-56170.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22"
]
}
],
"title": "CVE-2026-56170"
},
{
"cve": "CVE-2026-47304",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"notes": [
{
"category": "other",
"text": "Improper Verification of Cryptographic Signature",
"title": "CWE-347"
},
{
"category": "description",
"text": "Improper verification of cryptographic signatures in the .NET framework allows unauthorized attackers to bypass security mechanisms over a network, potentially compromising application integrity and security.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-47304 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-47304.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22"
]
}
],
"title": "CVE-2026-47304"
},
{
"cve": "CVE-2026-50525",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"notes": [
{
"category": "other",
"text": "Allocation of Resources Without Limits or Throttling",
"title": "CWE-770"
},
{
"category": "description",
"text": "Unrestricted resource allocation in .NET can allow unauthorized attackers to exploit the system, resulting in a denial of service over a network.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-50525 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-50525.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22"
]
}
],
"title": "CVE-2026-50525"
},
{
"cve": "CVE-2026-50526",
"cwe": {
"id": "CWE-59",
"name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)",
"title": "CWE-59"
},
{
"category": "description",
"text": "An improper link resolution vulnerability in the .NET framework permits an authorized local attacker to tamper with files, potentially compromising system integrity.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-50526 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-50526.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.0,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22"
]
}
],
"title": "CVE-2026-50526"
},
{
"cve": "CVE-2026-50527",
"cwe": {
"id": "CWE-121",
"name": "Stack-based Buffer Overflow"
},
"notes": [
{
"category": "other",
"text": "Stack-based Buffer Overflow",
"title": "CWE-121"
},
{
"category": "description",
"text": "A stack-based buffer overflow vulnerability in the .NET Framework allows unauthorized attackers to cause a denial of service over a network, impacting system stability and availability.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-50527 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-50527.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22"
]
}
],
"title": "CVE-2026-50527"
},
{
"cve": "CVE-2026-50528",
"cwe": {
"id": "CWE-302",
"name": "Authentication Bypass by Assumed-Immutable Data"
},
"notes": [
{
"category": "other",
"text": "Authentication Bypass by Assumed-Immutable Data",
"title": "CWE-302"
},
{
"category": "other",
"text": "Not Failing Securely (\u0027Failing Open\u0027)",
"title": "CWE-636"
},
{
"category": "other",
"text": "Incorrect Authorization",
"title": "CWE-863"
},
{
"category": "description",
"text": "An incorrect authorization vulnerability in the .NET framework allows remote attackers to bypass security controls, potentially leading to unauthorized access.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-50528 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-50528.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22"
]
}
],
"title": "CVE-2026-50528"
},
{
"cve": "CVE-2026-50648",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"notes": [
{
"category": "other",
"text": "Allocation of Resources Without Limits or Throttling",
"title": "CWE-770"
},
{
"category": "description",
"text": "An unthrottled resource allocation vulnerability in the .NET Framework allows an unauthorized attacker to cause a denial of service over a network by exhausting system resources.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-50648 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-50648.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22"
]
}
],
"title": "CVE-2026-50648"
},
{
"cve": "CVE-2026-50651",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"notes": [
{
"category": "other",
"text": "Allocation of Resources Without Limits or Throttling",
"title": "CWE-770"
},
{
"category": "description",
"text": "Unrestricted resource allocation in .NET can allow unauthorized attackers to exploit the system, resulting in a denial of service over a network.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-50651 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-50651.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22"
]
}
],
"title": "CVE-2026-50651"
},
{
"cve": "CVE-2026-50659",
"cwe": {
"id": "CWE-116",
"name": "Improper Encoding or Escaping of Output"
},
"notes": [
{
"category": "other",
"text": "Improper Encoding or Escaping of Output",
"title": "CWE-116"
},
{
"category": "description",
"text": "Improper encoding or escaping of output in .NET can allow an authorized attacker to perform network spoofing by manipulating network communications.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-50659 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-50659.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22"
]
}
],
"title": "CVE-2026-50659"
},
{
"cve": "CVE-2026-57108",
"cwe": {
"id": "CWE-843",
"name": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)"
},
"notes": [
{
"category": "other",
"text": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)",
"title": "CWE-843"
},
{
"category": "description",
"text": "A type confusion vulnerability in .NET Core allows unauthorized attackers to cause a denial of service by accessing resources using incompatible types over a network.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-57108 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-57108.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22"
]
}
],
"title": "CVE-2026-57108"
},
{
"cve": "CVE-2026-50646",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"notes": [
{
"category": "other",
"text": "Deserialization of Untrusted Data",
"title": "CWE-502"
},
{
"category": "description",
"text": "A protection mechanism failure in the .NET Framework allows an attacker to execute unauthorized local code, posing a significant security risk.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-50646 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-50646.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22"
]
}
],
"title": "CVE-2026-50646"
},
{
"cve": "CVE-2026-50649",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"notes": [
{
"category": "other",
"text": "Deserialization of Untrusted Data",
"title": "CWE-502"
},
{
"category": "description",
"text": "Deserialization of untrusted data in .NET environments can allow unauthorized attackers to execute arbitrary code locally, posing significant security risks.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-50649 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-50649.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22"
]
}
],
"title": "CVE-2026-50649"
},
{
"cve": "CVE-2026-50650",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Control of Generation of Code (\u0027Code Injection\u0027)",
"title": "CWE-94"
},
{
"category": "description",
"text": "A vulnerability in the .NET Framework\u0027s code generation control allows unauthorized local privilege escalation by improper handling of code execution permissions.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-50650 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-50650.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22"
]
}
],
"title": "CVE-2026-50650"
},
{
"cve": "CVE-2026-50506",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"notes": [
{
"category": "other",
"text": "Allocation of Resources Without Limits or Throttling",
"title": "CWE-770"
},
{
"category": "description",
"text": "An allocation of resources without limits or throttling in ASP.NET Core enables unauthorized attackers to perform denial of service attacks over a network.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-50506 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-50506.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22"
]
}
],
"title": "CVE-2026-50506"
},
{
"cve": "CVE-2026-45646",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"notes": [
{
"category": "other",
"text": "Allocation of Resources Without Limits or Throttling",
"title": "CWE-770"
},
{
"category": "description",
"text": "An allocation of resources without limits or throttling in ASP.NET Core enables unauthorized attackers to perform denial of service attacks over a network.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-45646 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-45646.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22"
]
}
],
"title": "CVE-2026-45646"
},
{
"cve": "CVE-2026-47282",
"cwe": {
"id": "CWE-522",
"name": "Insufficiently Protected Credentials"
},
"notes": [
{
"category": "other",
"text": "Insufficiently Protected Credentials",
"title": "CWE-522"
},
{
"category": "description",
"text": "Insufficiently protected credentials in GitHub Copilot and Visual Studio Code allow unauthorized attackers to disclose sensitive information over a network.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-47282 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-47282.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22"
]
}
],
"title": "CVE-2026-47282"
},
{
"cve": "CVE-2026-45496",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
"title": "CWE-22"
},
{
"category": "description",
"text": "A path traversal vulnerability in Visual Studio Code allows unauthorized local attackers to bypass security restrictions by improperly limiting pathnames to restricted directories.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-45496 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-45496.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22"
]
}
],
"title": "CVE-2026-45496"
},
{
"cve": "CVE-2026-50520",
"cwe": {
"id": "CWE-77",
"name": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)",
"title": "CWE-77"
},
{
"category": "description",
"text": "Improper neutralization of special elements in commands within Visual Studio Code can allow unauthorized local code execution by attackers.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-50520 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-50520.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22"
]
}
],
"title": "CVE-2026-50520"
},
{
"cve": "CVE-2026-41109",
"notes": [
{
"category": "description",
"text": "Improper neutralization of special elements in output by GitHub Copilot and Visual Studio enables unauthorized attackers to bypass security features over a network via injection vulnerabilities.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-41109 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-41109.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22"
]
}
],
"title": "CVE-2026-41109"
},
{
"cve": "CVE-2026-57101",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
"title": "CWE-79"
},
{
"category": "description",
"text": "An input neutralization flaw in Visual Studio Code\u0027s web page generation allows a local unauthorized attacker to bypass security features.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-57101 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-57101.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22"
]
}
],
"title": "CVE-2026-57101"
},
{
"cve": "CVE-2026-57102",
"cwe": {
"id": "CWE-829",
"name": "Inclusion of Functionality from Untrusted Control Sphere"
},
"notes": [
{
"category": "other",
"text": "Inclusion of Functionality from Untrusted Control Sphere",
"title": "CWE-829"
},
{
"category": "description",
"text": "A vulnerability in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network by including functionality from an untrusted control sphere.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-57102 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-57102.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22"
]
}
],
"title": "CVE-2026-57102"
},
{
"cve": "CVE-2026-47305",
"notes": [
{
"category": "description",
"text": "A protection mechanism failure in Visual Studio allows an attacker to execute unauthorized local code, posing a significant security risk.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-47305 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-47305.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22"
]
}
],
"title": "CVE-2026-47305"
}
]
}
RHSA-2026:27171
Vulnerability from csaf_redhat - Published: 2026-06-19 02:03 - Updated: 2026-08-04 19:03Summary
Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
Severity
Important
Notes
Topic: An update for Red Hat Hardened Images RPMs is now available.
Details: This update includes the following RPMs:
dotnet9.0:
* aspnetcore-runtime-9.0-9.0.17-1.hum1 (aarch64, x86_64)
* aspnetcore-runtime-dbg-9.0-9.0.17-1.hum1 (aarch64, x86_64)
* aspnetcore-targeting-pack-9.0-9.0.17-1.hum1 (aarch64, x86_64)
* dotnet-apphost-pack-9.0-9.0.17-1.hum1 (aarch64, x86_64)
* dotnet-hostfxr-9.0-9.0.17-1.hum1 (aarch64, x86_64)
* dotnet-runtime-9.0-9.0.17-1.hum1 (aarch64, x86_64)
* dotnet-runtime-dbg-9.0-9.0.17-1.hum1 (aarch64, x86_64)
* dotnet-sdk-9.0-9.0.118-1.hum1 (aarch64, x86_64)
* dotnet-sdk-9.0-source-built-artifacts-9.0.118-1.hum1 (aarch64, x86_64)
* dotnet-sdk-aot-9.0-9.0.118-1.hum1 (aarch64, x86_64)
* dotnet-sdk-dbg-9.0-9.0.118-1.hum1 (aarch64, x86_64)
* dotnet-targeting-pack-9.0-9.0.17-1.hum1 (aarch64, x86_64)
* dotnet-templates-9.0-9.0.118-1.hum1 (aarch64, x86_64)
* netstandard-targeting-pack-2.1-9.0.118-1.hum1 (aarch64, x86_64)
* dotnet9.0-9.0.118-1.hum1.src (src)
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in ws, an open source WebSocket client and server for Node.js. The `websocket.close()` implementation is vulnerable to uninitialized memory disclosure when a `TypedArray` is passed as the reason argument. This can lead to the disclosure of sensitive information from uninitialized memory.
7.5 (High)
Affected products
Fixed
3 products
Threats
Impact
Important
A flaw was found in .NET where uncontrolled resource allocation can be exploited by an unauthorized attacker over a network. This vulnerability allows the attacker to exhaust available resources, leading to a Denial of Service (DoS) condition. The lack of limits or throttling mechanisms enables an attacker to disrupt the availability of the affected system.
7.5 (High)
Affected products
Fixed
3 products
Threats
Impact
Important
A flaw was found in .NET Framework. This improper validation of input allows an unauthorized attacker to remotely deny service over a network. This vulnerability can lead to a Denial of Service (DoS) condition, making the affected system unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
3 products
Threats
Impact
Important
A flaw was found in .NET where uncontrolled allocation of resources can lead to a Denial of Service (DoS). An unauthorized remote attacker could exploit this vulnerability by continuously requesting resources without limits or throttling, causing the affected system to become unresponsive or crash. This can disrupt the availability of services running on the .NET framework.
7.5 (High)
Affected products
Fixed
3 products
Threats
Impact
Important
A flaw was found in .NET. This vulnerability, stemming from improper link resolution before file access, allows an authorized local attacker to perform tampering. This could lead to unauthorized modification of data or system files.
7.0 (High)
Affected products
Fixed
3 products
Threats
Impact
Moderate
A flaw was found in .NET Framework. This vulnerability, a stack-based buffer overflow, allows an unauthorized attacker to remotely exploit the system over a network. Successful exploitation can lead to a denial of service (DoS), making the affected system unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
3 products
Threats
Impact
Important
A flaw was found in .NET where incorrect authorization allows an unauthorized attacker to bypass a security feature over a network. This vulnerability enables an attacker to circumvent intended security controls, potentially leading to unauthorized access or actions within the affected system.
8.2 (High)
Affected products
Fixed
3 products
Threats
Impact
Important
A flaw was found in .NET Framework. This protection mechanism failure allows an unauthorized attacker to execute arbitrary code locally. Successful exploitation of this vulnerability can lead to a complete compromise of the affected system.
7.8 (High)
Affected products
Fixed
3 products
Threats
Impact
Important
A flaw was found in .NET Framework. An unauthorized attacker can exploit this vulnerability remotely by causing the system to allocate resources without proper limits or throttling. This uncontrolled resource allocation can lead to a Denial of Service (DoS), making the affected system unresponsive or unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
3 products
Threats
Impact
Important
A flaw was found in .NET. This vulnerability allows an unauthorized attacker to execute code locally by exploiting a deserialization of untrusted data. This means that if an attacker can provide specially crafted data, the .NET application may process it in a way that leads to the execution of malicious code on the system where the application is running.
7.8 (High)
Affected products
Fixed
3 products
Threats
Impact
Important
A flaw was found in .NET Framework. This vulnerability, caused by improper control of code generation, allows an unauthorized attacker to inject malicious code. Successful exploitation can lead to local privilege escalation, enabling the attacker to gain higher access rights on the affected system.
7.8 (High)
Affected products
Fixed
3 products
Threats
Impact
Important
.NET Denial of Service Vulnerability - HTTP/2 SETTINGS/PING ACK flood causing OOM
7.5 (High)
Affected products
Fixed
3 products
Threats
Impact
Important
A flaw was found in .NET Core. This vulnerability, known as type confusion, allows an unauthorized remote attacker to cause a denial of service (DoS) over a network. By exploiting this flaw, an attacker can make the affected system unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
3 products
Threats
Impact
Important
References
82 references
| URL | Category |
|---|---|
| https://access.redhat.com/errata/RHSA-2026:27171 | self |
| https://images.redhat.com/ | external |
| https://access.redhat.com/security/cve/CVE-2026-45736 | external |
| https://access.redhat.com/security/updates/classi… | external |
| https://access.redhat.com/security/cve/CVE-2026-50646 | external |
| https://access.redhat.com/security/cve/CVE-2026-50527 | external |
| https://access.redhat.com/security/cve/CVE-2026-50526 | external |
| https://access.redhat.com/security/cve/CVE-2026-50649 | external |
| https://access.redhat.com/security/cve/CVE-2026-50524 | external |
| https://access.redhat.com/security/cve/CVE-2026-50648 | external |
| https://access.redhat.com/security/cve/CVE-2026-50525 | external |
| https://access.redhat.com/security/cve/CVE-2026-50528 | external |
| https://access.redhat.com/security/cve/CVE-2026-50650 | external |
| https://access.redhat.com/security/cve/CVE-2026-47302 | external |
| https://access.redhat.com/security/cve/CVE-2026-57108 | external |
| https://access.redhat.com/security/cve/CVE-2026-50651 | external |
| https://security.access.redhat.com/data/csaf/v2/a… | self |
| https://access.redhat.com/security/cve/CVE-2026-45736 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2477914 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-45736 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-45736 | external |
| https://github.com/websockets/ws/commit/c0327ec15… | external |
| https://github.com/websockets/ws/security/advisor… | external |
| https://access.redhat.com/security/cve/CVE-2026-47302 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2500515 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-47302 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-47302 | external |
| https://msrc.microsoft.com/update-guide/vulnerabi… | external |
| https://access.redhat.com/security/cve/CVE-2026-50524 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2500593 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-50524 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-50524 | external |
| https://msrc.microsoft.com/update-guide/vulnerabi… | external |
| https://access.redhat.com/security/cve/CVE-2026-50525 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2500580 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-50525 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-50525 | external |
| https://msrc.microsoft.com/update-guide/vulnerabi… | external |
| https://access.redhat.com/security/cve/CVE-2026-50526 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2500565 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-50526 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-50526 | external |
| https://msrc.microsoft.com/update-guide/vulnerabi… | external |
| https://access.redhat.com/security/cve/CVE-2026-50527 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2500581 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-50527 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-50527 | external |
| https://msrc.microsoft.com/update-guide/vulnerabi… | external |
| https://access.redhat.com/security/cve/CVE-2026-50528 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2500562 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-50528 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-50528 | external |
| https://msrc.microsoft.com/update-guide/vulnerabi… | external |
| https://access.redhat.com/security/cve/CVE-2026-50646 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2500577 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-50646 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-50646 | external |
| https://msrc.microsoft.com/update-guide/vulnerabi… | external |
| https://access.redhat.com/security/cve/CVE-2026-50648 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2500587 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-50648 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-50648 | external |
| https://msrc.microsoft.com/update-guide/vulnerabi… | external |
| https://access.redhat.com/security/cve/CVE-2026-50649 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2500563 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-50649 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-50649 | external |
| https://msrc.microsoft.com/update-guide/vulnerabi… | external |
| https://access.redhat.com/security/cve/CVE-2026-50650 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2500556 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-50650 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-50650 | external |
| https://msrc.microsoft.com/update-guide/vulnerabi… | external |
| https://access.redhat.com/security/cve/CVE-2026-50651 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2499217 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-50651 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-50651 | external |
| https://access.redhat.com/security/cve/CVE-2026-57108 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2500109 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-57108 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-57108 | external |
| https://msrc.microsoft.com/update-guide/vulnerabi… | external |
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for Red Hat Hardened Images RPMs is now available.",
"title": "Topic"
},
{
"category": "general",
"text": "This update includes the following RPMs:\n\ndotnet9.0:\n * aspnetcore-runtime-9.0-9.0.17-1.hum1 (aarch64, x86_64)\n * aspnetcore-runtime-dbg-9.0-9.0.17-1.hum1 (aarch64, x86_64)\n * aspnetcore-targeting-pack-9.0-9.0.17-1.hum1 (aarch64, x86_64)\n * dotnet-apphost-pack-9.0-9.0.17-1.hum1 (aarch64, x86_64)\n * dotnet-hostfxr-9.0-9.0.17-1.hum1 (aarch64, x86_64)\n * dotnet-runtime-9.0-9.0.17-1.hum1 (aarch64, x86_64)\n * dotnet-runtime-dbg-9.0-9.0.17-1.hum1 (aarch64, x86_64)\n * dotnet-sdk-9.0-9.0.118-1.hum1 (aarch64, x86_64)\n * dotnet-sdk-9.0-source-built-artifacts-9.0.118-1.hum1 (aarch64, x86_64)\n * dotnet-sdk-aot-9.0-9.0.118-1.hum1 (aarch64, x86_64)\n * dotnet-sdk-dbg-9.0-9.0.118-1.hum1 (aarch64, x86_64)\n * dotnet-targeting-pack-9.0-9.0.17-1.hum1 (aarch64, x86_64)\n * dotnet-templates-9.0-9.0.118-1.hum1 (aarch64, x86_64)\n * netstandard-targeting-pack-2.1-9.0.118-1.hum1 (aarch64, x86_64)\n * dotnet9.0-9.0.118-1.hum1.src (src)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:27171",
"url": "https://access.redhat.com/errata/RHSA-2026:27171"
},
{
"category": "external",
"summary": "https://images.redhat.com/",
"url": "https://images.redhat.com/"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-45736",
"url": "https://access.redhat.com/security/cve/CVE-2026-45736"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-50646",
"url": "https://access.redhat.com/security/cve/CVE-2026-50646"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-50527",
"url": "https://access.redhat.com/security/cve/CVE-2026-50527"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-50526",
"url": "https://access.redhat.com/security/cve/CVE-2026-50526"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-50649",
"url": "https://access.redhat.com/security/cve/CVE-2026-50649"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-50524",
"url": "https://access.redhat.com/security/cve/CVE-2026-50524"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-50648",
"url": "https://access.redhat.com/security/cve/CVE-2026-50648"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-50525",
"url": "https://access.redhat.com/security/cve/CVE-2026-50525"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-50528",
"url": "https://access.redhat.com/security/cve/CVE-2026-50528"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-50650",
"url": "https://access.redhat.com/security/cve/CVE-2026-50650"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-47302",
"url": "https://access.redhat.com/security/cve/CVE-2026-47302"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-57108",
"url": "https://access.redhat.com/security/cve/CVE-2026-57108"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-50651",
"url": "https://access.redhat.com/security/cve/CVE-2026-50651"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_27171.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update",
"tracking": {
"current_release_date": "2026-08-04T19:03:24+00:00",
"generator": {
"date": "2026-08-04T19:03:24+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.8"
}
},
"id": "RHSA-2026:27171",
"initial_release_date": "2026-06-19T02:03:31+00:00",
"revision_history": [
{
"date": "2026-06-19T02:03:31+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-01T08:08:43+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-04T19:03:24+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Hardened Images",
"product": {
"name": "Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:hummingbird:1"
}
}
}
],
"category": "product_family",
"name": "Red Hat Hardened Images"
},
{
"branches": [
{
"category": "product_version",
"name": "dotnet9-0-main@aarch64",
"product": {
"name": "dotnet9-0-main@aarch64",
"product_id": "dotnet9-0-main@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-9.0@9.0.17-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "dotnet9-0-main@x86_64",
"product": {
"name": "dotnet9-0-main@x86_64",
"product_id": "dotnet9-0-main@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-9.0@9.0.17-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "dotnet9-0-main@src",
"product": {
"name": "dotnet9-0-main@src",
"product_id": "dotnet9-0-main@src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet9.0@9.0.118-1.hum1?arch=src\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-source-rpms"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet9-0-main@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:dotnet9-0-main@aarch64"
},
"product_reference": "dotnet9-0-main@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet9-0-main@src as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:dotnet9-0-main@src"
},
"product_reference": "dotnet9-0-main@src",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet9-0-main@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:dotnet9-0-main@x86_64"
},
"product_reference": "dotnet9-0-main@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-45736",
"cwe": {
"id": "CWE-824",
"name": "Access of Uninitialized Pointer"
},
"discovery_date": "2026-05-15T16:00:55.786944+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477914"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ws, an open source WebSocket client and server for Node.js. The `websocket.close()` implementation is vulnerable to uninitialized memory disclosure when a `TypedArray` is passed as the reason argument. This can lead to the disclosure of sensitive information from uninitialized memory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ws: ws: Uninitialized memory disclosure via `websocket.close()` with `TypedArray`",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in the `ws` WebSocket library for Node.js could lead to sensitive information disclosure. The flaw occurs when a `TypedArray` is specifically provided as the `reason` argument to the `websocket.close()` function, potentially exposing uninitialized memory. Red Hat products utilizing this library may be affected if their implementations allow for such a crafted `close()` call.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:dotnet9-0-main@aarch64",
"Red Hat Hardened Images:dotnet9-0-main@src",
"Red Hat Hardened Images:dotnet9-0-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45736"
},
{
"category": "external",
"summary": "RHBZ#2477914",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477914"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45736",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45736"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45736",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45736"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/c0327ec15a54d701eb6ccefaa8bef328cfc03086",
"url": "https://github.com/websockets/ws/commit/c0327ec15a54d701eb6ccefaa8bef328cfc03086"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/security/advisories/GHSA-58qx-3vcg-4xpx",
"url": "https://github.com/websockets/ws/security/advisories/GHSA-58qx-3vcg-4xpx"
}
],
"release_date": "2026-05-15T14:53:57.263000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-19T02:03:31+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:dotnet9-0-main@aarch64",
"Red Hat Hardened Images:dotnet9-0-main@src",
"Red Hat Hardened Images:dotnet9-0-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:27171"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:dotnet9-0-main@aarch64",
"Red Hat Hardened Images:dotnet9-0-main@src",
"Red Hat Hardened Images:dotnet9-0-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ws: ws: Uninitialized memory disclosure via `websocket.close()` with `TypedArray`"
},
{
"cve": "CVE-2026-47302",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-07-14T19:05:21.556064+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2500515"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in .NET where uncontrolled resource allocation can be exploited by an unauthorized attacker over a network. This vulnerability allows the attacker to exhaust available resources, leading to a Denial of Service (DoS) condition. The lack of limits or throttling mechanisms enables an attacker to disrupt the availability of the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: .NET: Denial of Service vulnerability due to uncontrolled resource allocation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:dotnet9-0-main@aarch64",
"Red Hat Hardened Images:dotnet9-0-main@src",
"Red Hat Hardened Images:dotnet9-0-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-47302"
},
{
"category": "external",
"summary": "RHBZ#2500515",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500515"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-47302",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47302"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-47302",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47302"
},
{
"category": "external",
"summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47302",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47302"
}
],
"release_date": "2026-07-14T18:45:32.796000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-19T02:03:31+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:dotnet9-0-main@aarch64",
"Red Hat Hardened Images:dotnet9-0-main@src",
"Red Hat Hardened Images:dotnet9-0-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:27171"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:dotnet9-0-main@aarch64",
"Red Hat Hardened Images:dotnet9-0-main@src",
"Red Hat Hardened Images:dotnet9-0-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet: .NET: Denial of Service vulnerability due to uncontrolled resource allocation"
},
{
"cve": "CVE-2026-50524",
"cwe": {
"id": "CWE-1287",
"name": "Improper Validation of Specified Type of Input"
},
"discovery_date": "2026-07-14T20:05:17.686937+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2500593"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in .NET Framework. This improper validation of input allows an unauthorized attacker to remotely deny service over a network. This vulnerability can lead to a Denial of Service (DoS) condition, making the affected system unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: .NET Framework: Denial of Service via improper input validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:dotnet9-0-main@aarch64",
"Red Hat Hardened Images:dotnet9-0-main@src",
"Red Hat Hardened Images:dotnet9-0-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-50524"
},
{
"category": "external",
"summary": "RHBZ#2500593",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500593"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-50524",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50524"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-50524",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-50524"
},
{
"category": "external",
"summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50524",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50524"
}
],
"release_date": "2026-07-14T19:29:53.872000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-19T02:03:31+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:dotnet9-0-main@aarch64",
"Red Hat Hardened Images:dotnet9-0-main@src",
"Red Hat Hardened Images:dotnet9-0-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:27171"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:dotnet9-0-main@aarch64",
"Red Hat Hardened Images:dotnet9-0-main@src",
"Red Hat Hardened Images:dotnet9-0-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet: .NET Framework: Denial of Service via improper input validation"
},
{
"cve": "CVE-2026-50525",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-07-14T20:04:03.113976+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2500580"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in .NET where uncontrolled allocation of resources can lead to a Denial of Service (DoS). An unauthorized remote attacker could exploit this vulnerability by continuously requesting resources without limits or throttling, causing the affected system to become unresponsive or crash. This can disrupt the availability of services running on the .NET framework.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: .NET: Denial of Service due to uncontrolled resource allocation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:dotnet9-0-main@aarch64",
"Red Hat Hardened Images:dotnet9-0-main@src",
"Red Hat Hardened Images:dotnet9-0-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-50525"
},
{
"category": "external",
"summary": "RHBZ#2500580",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500580"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-50525",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50525"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-50525",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-50525"
},
{
"category": "external",
"summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50525",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50525"
}
],
"release_date": "2026-07-14T19:29:54.357000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-19T02:03:31+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:dotnet9-0-main@aarch64",
"Red Hat Hardened Images:dotnet9-0-main@src",
"Red Hat Hardened Images:dotnet9-0-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:27171"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:dotnet9-0-main@aarch64",
"Red Hat Hardened Images:dotnet9-0-main@src",
"Red Hat Hardened Images:dotnet9-0-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet: .NET: Denial of Service due to uncontrolled resource allocation"
},
{
"cve": "CVE-2026-50526",
"cwe": {
"id": "CWE-59",
"name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
},
"discovery_date": "2026-07-14T20:02:30.433807+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2500565"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in .NET. This vulnerability, stemming from improper link resolution before file access, allows an authorized local attacker to perform tampering. This could lead to unauthorized modification of data or system files.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: .NET: Local tampering via improper link resolution",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:dotnet9-0-main@aarch64",
"Red Hat Hardened Images:dotnet9-0-main@src",
"Red Hat Hardened Images:dotnet9-0-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-50526"
},
{
"category": "external",
"summary": "RHBZ#2500565",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500565"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-50526",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50526"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-50526",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-50526"
},
{
"category": "external",
"summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50526",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50526"
}
],
"release_date": "2026-07-14T19:29:54.992000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-19T02:03:31+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:dotnet9-0-main@aarch64",
"Red Hat Hardened Images:dotnet9-0-main@src",
"Red Hat Hardened Images:dotnet9-0-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:27171"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:dotnet9-0-main@aarch64",
"Red Hat Hardened Images:dotnet9-0-main@src",
"Red Hat Hardened Images:dotnet9-0-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "dotnet: .NET: Local tampering via improper link resolution"
},
{
"cve": "CVE-2026-50527",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2026-07-14T20:04:09.962274+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2500581"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in .NET Framework. This vulnerability, a stack-based buffer overflow, allows an unauthorized attacker to remotely exploit the system over a network. Successful exploitation can lead to a denial of service (DoS), making the affected system unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: .NET Framework: Denial of Service via network-based buffer overflow",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:dotnet9-0-main@aarch64",
"Red Hat Hardened Images:dotnet9-0-main@src",
"Red Hat Hardened Images:dotnet9-0-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-50527"
},
{
"category": "external",
"summary": "RHBZ#2500581",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500581"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-50527",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50527"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-50527",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-50527"
},
{
"category": "external",
"summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50527",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50527"
}
],
"release_date": "2026-07-14T19:29:55.564000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-19T02:03:31+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:dotnet9-0-main@aarch64",
"Red Hat Hardened Images:dotnet9-0-main@src",
"Red Hat Hardened Images:dotnet9-0-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:27171"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:dotnet9-0-main@aarch64",
"Red Hat Hardened Images:dotnet9-0-main@src",
"Red Hat Hardened Images:dotnet9-0-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet: .NET Framework: Denial of Service via network-based buffer overflow"
},
{
"cve": "CVE-2026-50528",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-07-14T20:02:07.038095+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2500562"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in .NET where incorrect authorization allows an unauthorized attacker to bypass a security feature over a network. This vulnerability enables an attacker to circumvent intended security controls, potentially leading to unauthorized access or actions within the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: .NET: Security feature bypass due to incorrect authorization",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:dotnet9-0-main@aarch64",
"Red Hat Hardened Images:dotnet9-0-main@src",
"Red Hat Hardened Images:dotnet9-0-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-50528"
},
{
"category": "external",
"summary": "RHBZ#2500562",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500562"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-50528",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50528"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-50528",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-50528"
},
{
"category": "external",
"summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50528",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50528"
}
],
"release_date": "2026-07-14T19:29:56.224000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-19T02:03:31+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:dotnet9-0-main@aarch64",
"Red Hat Hardened Images:dotnet9-0-main@src",
"Red Hat Hardened Images:dotnet9-0-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:27171"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:dotnet9-0-main@aarch64",
"Red Hat Hardened Images:dotnet9-0-main@src",
"Red Hat Hardened Images:dotnet9-0-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet: .NET: Security feature bypass due to incorrect authorization"
},
{
"cve": "CVE-2026-50646",
"cwe": {
"id": "CWE-807",
"name": "Reliance on Untrusted Inputs in a Security Decision"
},
"discovery_date": "2026-07-14T20:03:48.442720+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2500577"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in .NET Framework. This protection mechanism failure allows an unauthorized attacker to execute arbitrary code locally. Successful exploitation of this vulnerability can lead to a complete compromise of the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: .NET Framework: Local Code Execution via Protection Mechanism Failure",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:dotnet9-0-main@aarch64",
"Red Hat Hardened Images:dotnet9-0-main@src",
"Red Hat Hardened Images:dotnet9-0-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-50646"
},
{
"category": "external",
"summary": "RHBZ#2500577",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500577"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-50646",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50646"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-50646",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-50646"
},
{
"category": "external",
"summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50646",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50646"
}
],
"release_date": "2026-07-14T19:29:56.821000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-19T02:03:31+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:dotnet9-0-main@aarch64",
"Red Hat Hardened Images:dotnet9-0-main@src",
"Red Hat Hardened Images:dotnet9-0-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:27171"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:dotnet9-0-main@aarch64",
"Red Hat Hardened Images:dotnet9-0-main@src",
"Red Hat Hardened Images:dotnet9-0-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet: .NET Framework: Local Code Execution via Protection Mechanism Failure"
},
{
"cve": "CVE-2026-50648",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-07-14T20:04:45.063188+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2500587"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in .NET Framework. An unauthorized attacker can exploit this vulnerability remotely by causing the system to allocate resources without proper limits or throttling. This uncontrolled resource allocation can lead to a Denial of Service (DoS), making the affected system unresponsive or unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: .NET Framework: Remote Denial of Service due to uncontrolled resource allocation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:dotnet9-0-main@aarch64",
"Red Hat Hardened Images:dotnet9-0-main@src",
"Red Hat Hardened Images:dotnet9-0-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-50648"
},
{
"category": "external",
"summary": "RHBZ#2500587",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500587"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-50648",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50648"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-50648",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-50648"
},
{
"category": "external",
"summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50648",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50648"
}
],
"release_date": "2026-07-14T19:29:57.312000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-19T02:03:31+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:dotnet9-0-main@aarch64",
"Red Hat Hardened Images:dotnet9-0-main@src",
"Red Hat Hardened Images:dotnet9-0-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:27171"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:dotnet9-0-main@aarch64",
"Red Hat Hardened Images:dotnet9-0-main@src",
"Red Hat Hardened Images:dotnet9-0-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet: .NET Framework: Remote Denial of Service due to uncontrolled resource allocation"
},
{
"cve": "CVE-2026-50649",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"discovery_date": "2026-07-14T20:02:12.073604+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2500563"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in .NET. This vulnerability allows an unauthorized attacker to execute code locally by exploiting a deserialization of untrusted data. This means that if an attacker can provide specially crafted data, the .NET application may process it in a way that leads to the execution of malicious code on the system where the application is running.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: .NET: Local code execution via deserialization of untrusted data",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:dotnet9-0-main@aarch64",
"Red Hat Hardened Images:dotnet9-0-main@src",
"Red Hat Hardened Images:dotnet9-0-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-50649"
},
{
"category": "external",
"summary": "RHBZ#2500563",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500563"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-50649",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50649"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-50649",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-50649"
},
{
"category": "external",
"summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50649",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50649"
}
],
"release_date": "2026-07-14T19:29:57.970000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-19T02:03:31+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:dotnet9-0-main@aarch64",
"Red Hat Hardened Images:dotnet9-0-main@src",
"Red Hat Hardened Images:dotnet9-0-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:27171"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:dotnet9-0-main@aarch64",
"Red Hat Hardened Images:dotnet9-0-main@src",
"Red Hat Hardened Images:dotnet9-0-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet: .NET: Local code execution via deserialization of untrusted data"
},
{
"cve": "CVE-2026-50650",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2026-07-14T20:01:20.750427+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2500556"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in .NET Framework. This vulnerability, caused by improper control of code generation, allows an unauthorized attacker to inject malicious code. Successful exploitation can lead to local privilege escalation, enabling the attacker to gain higher access rights on the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: .NET Framework: Privilege escalation via code injection",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:dotnet9-0-main@aarch64",
"Red Hat Hardened Images:dotnet9-0-main@src",
"Red Hat Hardened Images:dotnet9-0-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-50650"
},
{
"category": "external",
"summary": "RHBZ#2500556",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500556"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-50650",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50650"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-50650",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-50650"
},
{
"category": "external",
"summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50650",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50650"
}
],
"release_date": "2026-07-14T19:29:58.620000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-19T02:03:31+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:dotnet9-0-main@aarch64",
"Red Hat Hardened Images:dotnet9-0-main@src",
"Red Hat Hardened Images:dotnet9-0-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:27171"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:dotnet9-0-main@aarch64",
"Red Hat Hardened Images:dotnet9-0-main@src",
"Red Hat Hardened Images:dotnet9-0-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet: .NET Framework: Privilege escalation via code injection"
},
{
"cve": "CVE-2026-50651",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-07-10T20:34:51.149000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2499217"
}
],
"notes": [
{
"category": "description",
"text": ".NET Denial of Service Vulnerability - HTTP/2 SETTINGS/PING ACK flood causing OOM",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: SocketsHttpHandler Http2Connection - HTTP/2 SETTINGS/PING ACK flood causing OOM",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:dotnet9-0-main@aarch64",
"Red Hat Hardened Images:dotnet9-0-main@src",
"Red Hat Hardened Images:dotnet9-0-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-50651"
},
{
"category": "external",
"summary": "RHBZ#2499217",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2499217"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-50651",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50651"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-50651",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-50651"
}
],
"release_date": "2026-07-14T21:37:42.263000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-19T02:03:31+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:dotnet9-0-main@aarch64",
"Red Hat Hardened Images:dotnet9-0-main@src",
"Red Hat Hardened Images:dotnet9-0-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:27171"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:dotnet9-0-main@aarch64",
"Red Hat Hardened Images:dotnet9-0-main@src",
"Red Hat Hardened Images:dotnet9-0-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet: SocketsHttpHandler Http2Connection - HTTP/2 SETTINGS/PING ACK flood causing OOM"
},
{
"cve": "CVE-2026-57108",
"cwe": {
"id": "CWE-843",
"name": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)"
},
"discovery_date": "2026-07-14T18:02:49.265651+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2500109"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in .NET Core. This vulnerability, known as type confusion, allows an unauthorized remote attacker to cause a denial of service (DoS) over a network. By exploiting this flaw, an attacker can make the affected system unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: .NET Core: Denial of Service via type confusion",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:dotnet9-0-main@aarch64",
"Red Hat Hardened Images:dotnet9-0-main@src",
"Red Hat Hardened Images:dotnet9-0-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-57108"
},
{
"category": "external",
"summary": "RHBZ#2500109",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500109"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-57108",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-57108"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-57108",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-57108"
},
{
"category": "external",
"summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57108",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57108"
}
],
"release_date": "2026-07-14T17:09:39.087000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-19T02:03:31+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:dotnet9-0-main@aarch64",
"Red Hat Hardened Images:dotnet9-0-main@src",
"Red Hat Hardened Images:dotnet9-0-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:27171"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:dotnet9-0-main@aarch64",
"Red Hat Hardened Images:dotnet9-0-main@src",
"Red Hat Hardened Images:dotnet9-0-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet: .NET Core: Denial of Service via type confusion"
}
]
}
RHSA-2026:41893
Vulnerability from csaf_redhat - Published: 2026-07-20 04:30 - Updated: 2026-07-23 03:46Summary
Red Hat Security Advisory: .NET 8.0 security, bug fix, and enhancement update
Severity
Important
Notes
Topic: An update for .NET 8.0 is now available for Red Hat Enterprise Linux 10.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.
New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.129 and .NET Runtime 8.0.29.
Security Fix(es):
* dotnet: SocketsHttpHandler Http2Connection - HTTP/2 SETTINGS/PING ACK flood causing OOM (CVE-2026-50651)
* dotnet: .NET Core: Denial of Service via type confusion (CVE-2026-57108)
* ASP.NET Core: ASP.NET Core: Denial of Service via uncontrolled resource allocation (CVE-2026-56170)
* ASP.NET Core: ASP.NET Core: Privilege Escalation via Incorrect Authentication Algorithm (CVE-2026-47300)
* ASP.NET Core: ASP.NET Core: Privilege Elevation via Authentication Bypass (CVE-2026-47303)
* dotnet: .NET Security Feature Bypass Vulnerability (CVE-2026-47304)
* dotnet: .NET: Denial of Service vulnerability due to uncontrolled resource allocation (CVE-2026-47302)
* dotnet: .NET Framework: Privilege escalation via code injection (CVE-2026-50650)
* dotnet: .NET: Security feature bypass due to incorrect authorization (CVE-2026-50528)
* dotnet: .NET: Local code execution via deserialization of untrusted data (CVE-2026-50649)
* dotnet: .NET: Local tampering via improper link resolution (CVE-2026-50526)
* dotnet: .NET Framework: Local Code Execution via Protection Mechanism Failure (CVE-2026-50646)
* dotnet: .NET: Denial of Service due to uncontrolled resource allocation (CVE-2026-50525)
* dotnet: .NET Framework: Denial of Service via network-based buffer overflow (CVE-2026-50527)
* dotnet: .NET Framework: Remote Denial of Service due to uncontrolled resource allocation (CVE-2026-50648)
* .NET: .NET: Network Spoofing Vulnerability (CVE-2026-50659)
* dotnet: .NET Framework: Denial of Service via improper input validation (CVE-2026-50524)
Bug Fix(es) and Enhancement(s):
* Update .NET 8.0 to SDK 8.0.129 and Runtime 8.0.29 [rhel-10.2.z] (JIRA:RHEL-192468)
* dotnet8.0: Reduce time to detect hanging builds during .NET RPM builds (c10s) [rhel-10.2.z] (JIRA:RHEL-192329)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in ASP.NET Core. An authorized attacker can exploit an incorrect implementation of the authentication algorithm over a network. This vulnerability allows the attacker to elevate their privileges, potentially gaining unauthorized access to sensitive resources or performing actions beyond their intended permissions.
8.8 (High)
Affected products
Fixed
89 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet8.0-0:8.0.129-1.el10_2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in .NET where uncontrolled resource allocation can be exploited by an unauthorized attacker over a network. This vulnerability allows the attacker to exhaust available resources, leading to a Denial of Service (DoS) condition. The lack of limits or throttling mechanisms enables an attacker to disrupt the availability of the affected system.
7.5 (High)
Affected products
Fixed
89 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet8.0-0:8.0.129-1.el10_2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in ASP.NET Core. An authorized attacker can exploit this authentication bypass vulnerability over a network by manipulating assumed-immutable data. This can allow the attacker to elevate their privileges within the system.
8.8 (High)
Affected products
Fixed
89 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet8.0-0:8.0.129-1.el10_2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in .NET. An unauthorized attacker can exploit this vulnerability over a network due to improper verification of cryptographic signatures. This allows the attacker to bypass a critical security feature, potentially leading to significant compromise of confidentiality, integrity, and availability.
8.1 (High)
Affected products
Fixed
89 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet8.0-0:8.0.129-1.el10_2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in .NET Framework. This improper validation of input allows an unauthorized attacker to remotely deny service over a network. This vulnerability can lead to a Denial of Service (DoS) condition, making the affected system unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
89 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet8.0-0:8.0.129-1.el10_2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in .NET where uncontrolled allocation of resources can lead to a Denial of Service (DoS). An unauthorized remote attacker could exploit this vulnerability by continuously requesting resources without limits or throttling, causing the affected system to become unresponsive or crash. This can disrupt the availability of services running on the .NET framework.
7.5 (High)
Affected products
Fixed
89 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet8.0-0:8.0.129-1.el10_2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in .NET. This vulnerability, stemming from improper link resolution before file access, allows an authorized local attacker to perform tampering. This could lead to unauthorized modification of data or system files.
7.0 (High)
Affected products
Fixed
89 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet8.0-0:8.0.129-1.el10_2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A flaw was found in .NET Framework. This vulnerability, a stack-based buffer overflow, allows an unauthorized attacker to remotely exploit the system over a network. Successful exploitation can lead to a denial of service (DoS), making the affected system unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
89 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet8.0-0:8.0.129-1.el10_2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in .NET where incorrect authorization allows an unauthorized attacker to bypass a security feature over a network. This vulnerability enables an attacker to circumvent intended security controls, potentially leading to unauthorized access or actions within the affected system.
8.2 (High)
Affected products
Fixed
89 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet8.0-0:8.0.129-1.el10_2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in .NET Framework. This protection mechanism failure allows an unauthorized attacker to execute arbitrary code locally. Successful exploitation of this vulnerability can lead to a complete compromise of the affected system.
7.8 (High)
Affected products
Fixed
89 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet8.0-0:8.0.129-1.el10_2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in .NET Framework. An unauthorized attacker can exploit this vulnerability remotely by causing the system to allocate resources without proper limits or throttling. This uncontrolled resource allocation can lead to a Denial of Service (DoS), making the affected system unresponsive or unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
89 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet8.0-0:8.0.129-1.el10_2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in .NET. This vulnerability allows an unauthorized attacker to execute code locally by exploiting a deserialization of untrusted data. This means that if an attacker can provide specially crafted data, the .NET application may process it in a way that leads to the execution of malicious code on the system where the application is running.
7.8 (High)
Affected products
Fixed
89 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet8.0-0:8.0.129-1.el10_2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in .NET Framework. This vulnerability, caused by improper control of code generation, allows an unauthorized attacker to inject malicious code. Successful exploitation can lead to local privilege escalation, enabling the attacker to gain higher access rights on the affected system.
7.8 (High)
Affected products
Fixed
89 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet8.0-0:8.0.129-1.el10_2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
.NET Denial of Service Vulnerability - HTTP/2 SETTINGS/PING ACK flood causing OOM
7.5 (High)
Affected products
Fixed
89 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet8.0-0:8.0.129-1.el10_2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in .NET. An authorized attacker can exploit this vulnerability by leveraging improper encoding or escaping of output. This allows the attacker to perform spoofing over a network, potentially deceiving users or systems into believing they are interacting with a trusted entity.
6.5 (Medium)
Affected products
Fixed
89 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet8.0-0:8.0.129-1.el10_2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A flaw was found in ASP.NET Core. This vulnerability allows an unauthorized remote attacker to cause a Denial of Service (DoS) by allocating resources without proper limits or throttling. This can lead to the affected system becoming unresponsive or unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
89 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet8.0-0:8.0.129-1.el10_2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in .NET Core. This vulnerability, known as type confusion, allows an unauthorized remote attacker to cause a denial of service (DoS) over a network. By exploiting this flaw, an attacker can make the affected system unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
89 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet8.0-0:8.0.129-1.el10_2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
References
104 references
| URL | Category |
|---|---|
| https://access.redhat.com/errata/RHSA-2026:41893 | self |
| https://access.redhat.com/security/updates/classi… | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2499217 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2500109 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2500189 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2500492 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2500502 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2500509 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2500515 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2500556 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2500562 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2500563 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2500565 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2500577 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2500580 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2500581 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2500587 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2500589 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2500593 | external |
| https://security.access.redhat.com/data/csaf/v2/a… | self |
| https://access.redhat.com/security/cve/CVE-2026-47300 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2500492 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-47300 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-47300 | external |
| https://msrc.microsoft.com/update-guide/vulnerabi… | external |
| https://access.redhat.com/security/cve/CVE-2026-47302 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2500515 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-47302 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-47302 | external |
| https://msrc.microsoft.com/update-guide/vulnerabi… | external |
| https://access.redhat.com/security/cve/CVE-2026-47303 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2500502 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-47303 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-47303 | external |
| https://msrc.microsoft.com/update-guide/vulnerabi… | external |
| https://access.redhat.com/security/cve/CVE-2026-47304 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2500509 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-47304 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-47304 | external |
| https://msrc.microsoft.com/update-guide/vulnerabi… | external |
| https://access.redhat.com/security/cve/CVE-2026-50524 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2500593 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-50524 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-50524 | external |
| https://msrc.microsoft.com/update-guide/vulnerabi… | external |
| https://access.redhat.com/security/cve/CVE-2026-50525 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2500580 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-50525 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-50525 | external |
| https://msrc.microsoft.com/update-guide/vulnerabi… | external |
| https://access.redhat.com/security/cve/CVE-2026-50526 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2500565 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-50526 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-50526 | external |
| https://msrc.microsoft.com/update-guide/vulnerabi… | external |
| https://access.redhat.com/security/cve/CVE-2026-50527 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2500581 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-50527 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-50527 | external |
| https://msrc.microsoft.com/update-guide/vulnerabi… | external |
| https://access.redhat.com/security/cve/CVE-2026-50528 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2500562 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-50528 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-50528 | external |
| https://msrc.microsoft.com/update-guide/vulnerabi… | external |
| https://access.redhat.com/security/cve/CVE-2026-50646 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2500577 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-50646 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-50646 | external |
| https://msrc.microsoft.com/update-guide/vulnerabi… | external |
| https://access.redhat.com/security/cve/CVE-2026-50648 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2500587 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-50648 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-50648 | external |
| https://msrc.microsoft.com/update-guide/vulnerabi… | external |
| https://access.redhat.com/security/cve/CVE-2026-50649 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2500563 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-50649 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-50649 | external |
| https://msrc.microsoft.com/update-guide/vulnerabi… | external |
| https://access.redhat.com/security/cve/CVE-2026-50650 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2500556 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-50650 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-50650 | external |
| https://msrc.microsoft.com/update-guide/vulnerabi… | external |
| https://access.redhat.com/security/cve/CVE-2026-50651 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2499217 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-50651 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-50651 | external |
| https://access.redhat.com/security/cve/CVE-2026-50659 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2500589 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-50659 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-50659 | external |
| https://msrc.microsoft.com/update-guide/vulnerabi… | external |
| https://access.redhat.com/security/cve/CVE-2026-56170 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2500189 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-56170 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-56170 | external |
| https://msrc.microsoft.com/update-guide/vulnerabi… | external |
| https://access.redhat.com/security/cve/CVE-2026-57108 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2500109 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-57108 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-57108 | external |
| https://msrc.microsoft.com/update-guide/vulnerabi… | external |
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for .NET 8.0 is now available for Red Hat Enterprise Linux 10.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": ".NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.\n\nNew versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.129 and .NET Runtime 8.0.29.\n\nSecurity Fix(es):\n\n* dotnet: SocketsHttpHandler Http2Connection - HTTP/2 SETTINGS/PING ACK flood causing OOM (CVE-2026-50651)\n\n* dotnet: .NET Core: Denial of Service via type confusion (CVE-2026-57108)\n\n* ASP.NET Core: ASP.NET Core: Denial of Service via uncontrolled resource allocation (CVE-2026-56170)\n\n* ASP.NET Core: ASP.NET Core: Privilege Escalation via Incorrect Authentication Algorithm (CVE-2026-47300)\n\n* ASP.NET Core: ASP.NET Core: Privilege Elevation via Authentication Bypass (CVE-2026-47303)\n\n* dotnet: .NET Security Feature Bypass Vulnerability (CVE-2026-47304)\n\n* dotnet: .NET: Denial of Service vulnerability due to uncontrolled resource allocation (CVE-2026-47302)\n\n* dotnet: .NET Framework: Privilege escalation via code injection (CVE-2026-50650)\n\n* dotnet: .NET: Security feature bypass due to incorrect authorization (CVE-2026-50528)\n\n* dotnet: .NET: Local code execution via deserialization of untrusted data (CVE-2026-50649)\n\n* dotnet: .NET: Local tampering via improper link resolution (CVE-2026-50526)\n\n* dotnet: .NET Framework: Local Code Execution via Protection Mechanism Failure (CVE-2026-50646)\n\n* dotnet: .NET: Denial of Service due to uncontrolled resource allocation (CVE-2026-50525)\n\n* dotnet: .NET Framework: Denial of Service via network-based buffer overflow (CVE-2026-50527)\n\n* dotnet: .NET Framework: Remote Denial of Service due to uncontrolled resource allocation (CVE-2026-50648)\n\n* .NET: .NET: Network Spoofing Vulnerability (CVE-2026-50659)\n\n* dotnet: .NET Framework: Denial of Service via improper input validation (CVE-2026-50524)\n\nBug Fix(es) and Enhancement(s):\n\n* Update .NET 8.0 to SDK 8.0.129 and Runtime 8.0.29 [rhel-10.2.z] (JIRA:RHEL-192468)\n\n* dotnet8.0: Reduce time to detect hanging builds during .NET RPM builds (c10s) [rhel-10.2.z] (JIRA:RHEL-192329)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:41893",
"url": "https://access.redhat.com/errata/RHSA-2026:41893"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2499217",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2499217"
},
{
"category": "external",
"summary": "2500109",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500109"
},
{
"category": "external",
"summary": "2500189",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500189"
},
{
"category": "external",
"summary": "2500492",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500492"
},
{
"category": "external",
"summary": "2500502",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500502"
},
{
"category": "external",
"summary": "2500509",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500509"
},
{
"category": "external",
"summary": "2500515",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500515"
},
{
"category": "external",
"summary": "2500556",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500556"
},
{
"category": "external",
"summary": "2500562",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500562"
},
{
"category": "external",
"summary": "2500563",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500563"
},
{
"category": "external",
"summary": "2500565",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500565"
},
{
"category": "external",
"summary": "2500577",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500577"
},
{
"category": "external",
"summary": "2500580",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500580"
},
{
"category": "external",
"summary": "2500581",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500581"
},
{
"category": "external",
"summary": "2500587",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500587"
},
{
"category": "external",
"summary": "2500589",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500589"
},
{
"category": "external",
"summary": "2500593",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500593"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_41893.json"
}
],
"title": "Red Hat Security Advisory: .NET 8.0 security, bug fix, and enhancement update",
"tracking": {
"current_release_date": "2026-07-23T03:46:03+00:00",
"generator": {
"date": "2026-07-23T03:46:03+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.7"
}
},
"id": "RHSA-2026:41893",
"initial_release_date": "2026-07-20T04:30:49+00:00",
"revision_history": [
{
"date": "2026-07-20T04:30:49+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-20T04:30:49+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-23T03:46:03+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream (v. 10)",
"product": {
"name": "Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:10.2"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product": {
"name": "Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:10.2"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"product": {
"name": "aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"product_id": "aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-8.0@8.0.29-1.el10_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"product": {
"name": "aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"product_id": "aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-dbg-8.0@8.0.29-1.el10_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"product": {
"name": "aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"product_id": "aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-8.0@8.0.29-1.el10_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"product": {
"name": "dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"product_id": "dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-8.0@8.0.29-1.el10_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.aarch64",
"product": {
"name": "dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.aarch64",
"product_id": "dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-8.0@8.0.29-1.el10_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"product": {
"name": "dotnet-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"product_id": "dotnet-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-8.0@8.0.29-1.el10_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"product": {
"name": "dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"product_id": "dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-dbg-8.0@8.0.29-1.el10_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-8.0-0:8.0.129-1.el10_2.aarch64",
"product": {
"name": "dotnet-sdk-8.0-0:8.0.129-1.el10_2.aarch64",
"product_id": "dotnet-sdk-8.0-0:8.0.129-1.el10_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-8.0@8.0.129-1.el10_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.aarch64",
"product": {
"name": "dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.aarch64",
"product_id": "dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-dbg-8.0@8.0.129-1.el10_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"product": {
"name": "dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"product_id": "dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-targeting-pack-8.0@8.0.29-1.el10_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-templates-8.0-0:8.0.129-1.el10_2.aarch64",
"product": {
"name": "dotnet-templates-8.0-0:8.0.129-1.el10_2.aarch64",
"product_id": "dotnet-templates-8.0-0:8.0.129-1.el10_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-templates-8.0@8.0.129-1.el10_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"product": {
"name": "dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"product_id": "dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet8.0-debugsource@8.0.129-1.el10_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"product": {
"name": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"product_id": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-8.0-debuginfo@8.0.29-1.el10_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"product": {
"name": "dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"product_id": "dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-8.0-debuginfo@8.0.29-1.el10_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"product": {
"name": "dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"product_id": "dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-8.0-debuginfo@8.0.29-1.el10_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"product": {
"name": "dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"product_id": "dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-8.0-debuginfo@8.0.129-1.el10_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.aarch64",
"product": {
"name": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.aarch64",
"product_id": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-8.0-source-built-artifacts@8.0.129-1.el10_2?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"product": {
"name": "aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"product_id": "aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-8.0@8.0.29-1.el10_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"product": {
"name": "aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"product_id": "aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-dbg-8.0@8.0.29-1.el10_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"product": {
"name": "aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"product_id": "aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-8.0@8.0.29-1.el10_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"product": {
"name": "dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"product_id": "dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-8.0@8.0.29-1.el10_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.ppc64le",
"product": {
"name": "dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.ppc64le",
"product_id": "dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-8.0@8.0.29-1.el10_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"product": {
"name": "dotnet-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"product_id": "dotnet-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-8.0@8.0.29-1.el10_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"product": {
"name": "dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"product_id": "dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-dbg-8.0@8.0.29-1.el10_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-8.0-0:8.0.129-1.el10_2.ppc64le",
"product": {
"name": "dotnet-sdk-8.0-0:8.0.129-1.el10_2.ppc64le",
"product_id": "dotnet-sdk-8.0-0:8.0.129-1.el10_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-8.0@8.0.129-1.el10_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.ppc64le",
"product": {
"name": "dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.ppc64le",
"product_id": "dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-dbg-8.0@8.0.129-1.el10_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"product": {
"name": "dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"product_id": "dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-targeting-pack-8.0@8.0.29-1.el10_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-templates-8.0-0:8.0.129-1.el10_2.ppc64le",
"product": {
"name": "dotnet-templates-8.0-0:8.0.129-1.el10_2.ppc64le",
"product_id": "dotnet-templates-8.0-0:8.0.129-1.el10_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-templates-8.0@8.0.129-1.el10_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"product": {
"name": "dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"product_id": "dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet8.0-debugsource@8.0.129-1.el10_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"product": {
"name": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"product_id": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-8.0-debuginfo@8.0.29-1.el10_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"product": {
"name": "dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"product_id": "dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-8.0-debuginfo@8.0.29-1.el10_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"product": {
"name": "dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"product_id": "dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-8.0-debuginfo@8.0.29-1.el10_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"product": {
"name": "dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"product_id": "dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-8.0-debuginfo@8.0.129-1.el10_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.ppc64le",
"product": {
"name": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.ppc64le",
"product_id": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-8.0-source-built-artifacts@8.0.129-1.el10_2?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"product": {
"name": "aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"product_id": "aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-8.0@8.0.29-1.el10_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"product": {
"name": "aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"product_id": "aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-dbg-8.0@8.0.29-1.el10_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"product": {
"name": "aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"product_id": "aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-8.0@8.0.29-1.el10_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"product": {
"name": "dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"product_id": "dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-8.0@8.0.29-1.el10_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.x86_64",
"product": {
"name": "dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.x86_64",
"product_id": "dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-8.0@8.0.29-1.el10_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"product": {
"name": "dotnet-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"product_id": "dotnet-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-8.0@8.0.29-1.el10_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"product": {
"name": "dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"product_id": "dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-dbg-8.0@8.0.29-1.el10_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-8.0-0:8.0.129-1.el10_2.x86_64",
"product": {
"name": "dotnet-sdk-8.0-0:8.0.129-1.el10_2.x86_64",
"product_id": "dotnet-sdk-8.0-0:8.0.129-1.el10_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-8.0@8.0.129-1.el10_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.x86_64",
"product": {
"name": "dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.x86_64",
"product_id": "dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-dbg-8.0@8.0.129-1.el10_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"product": {
"name": "dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"product_id": "dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-targeting-pack-8.0@8.0.29-1.el10_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-templates-8.0-0:8.0.129-1.el10_2.x86_64",
"product": {
"name": "dotnet-templates-8.0-0:8.0.129-1.el10_2.x86_64",
"product_id": "dotnet-templates-8.0-0:8.0.129-1.el10_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-templates-8.0@8.0.129-1.el10_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64",
"product": {
"name": "dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64",
"product_id": "dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet8.0-debugsource@8.0.129-1.el10_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"product": {
"name": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"product_id": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-8.0-debuginfo@8.0.29-1.el10_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"product": {
"name": "dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"product_id": "dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-8.0-debuginfo@8.0.29-1.el10_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"product": {
"name": "dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"product_id": "dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-8.0-debuginfo@8.0.29-1.el10_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"product": {
"name": "dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"product_id": "dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-8.0-debuginfo@8.0.129-1.el10_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.x86_64",
"product": {
"name": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.x86_64",
"product_id": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-8.0-source-built-artifacts@8.0.129-1.el10_2?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"product": {
"name": "aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"product_id": "aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-8.0@8.0.29-1.el10_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"product": {
"name": "aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"product_id": "aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-dbg-8.0@8.0.29-1.el10_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"product": {
"name": "aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"product_id": "aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-8.0@8.0.29-1.el10_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.s390x",
"product": {
"name": "dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.s390x",
"product_id": "dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-8.0@8.0.29-1.el10_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.s390x",
"product": {
"name": "dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.s390x",
"product_id": "dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-8.0@8.0.29-1.el10_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"product": {
"name": "dotnet-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"product_id": "dotnet-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-8.0@8.0.29-1.el10_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"product": {
"name": "dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"product_id": "dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-dbg-8.0@8.0.29-1.el10_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-8.0-0:8.0.129-1.el10_2.s390x",
"product": {
"name": "dotnet-sdk-8.0-0:8.0.129-1.el10_2.s390x",
"product_id": "dotnet-sdk-8.0-0:8.0.129-1.el10_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-8.0@8.0.129-1.el10_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.s390x",
"product": {
"name": "dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.s390x",
"product_id": "dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-dbg-8.0@8.0.129-1.el10_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"product": {
"name": "dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"product_id": "dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-targeting-pack-8.0@8.0.29-1.el10_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-templates-8.0-0:8.0.129-1.el10_2.s390x",
"product": {
"name": "dotnet-templates-8.0-0:8.0.129-1.el10_2.s390x",
"product_id": "dotnet-templates-8.0-0:8.0.129-1.el10_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-templates-8.0@8.0.129-1.el10_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"product": {
"name": "dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"product_id": "dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet8.0-debugsource@8.0.129-1.el10_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"product": {
"name": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"product_id": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-8.0-debuginfo@8.0.29-1.el10_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"product": {
"name": "dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"product_id": "dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-8.0-debuginfo@8.0.29-1.el10_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"product": {
"name": "dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"product_id": "dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-8.0-debuginfo@8.0.29-1.el10_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"product": {
"name": "dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"product_id": "dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-8.0-debuginfo@8.0.129-1.el10_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.s390x",
"product": {
"name": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.s390x",
"product_id": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-8.0-source-built-artifacts@8.0.129-1.el10_2?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "dotnet8.0-0:8.0.129-1.el10_2.src",
"product": {
"name": "dotnet8.0-0:8.0.129-1.el10_2.src",
"product_id": "dotnet8.0-0:8.0.129-1.el10_2.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet8.0@8.0.129-1.el10_2?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.aarch64"
},
"product_reference": "aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.ppc64le"
},
"product_reference": "aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.s390x"
},
"product_reference": "aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.x86_64"
},
"product_reference": "aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64"
},
"product_reference": "aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le"
},
"product_reference": "aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x"
},
"product_reference": "aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64"
},
"product_reference": "aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64"
},
"product_reference": "aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le"
},
"product_reference": "aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x"
},
"product_reference": "aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64"
},
"product_reference": "aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.aarch64"
},
"product_reference": "dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.ppc64le"
},
"product_reference": "dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.s390x"
},
"product_reference": "dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.x86_64"
},
"product_reference": "dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64"
},
"product_reference": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le"
},
"product_reference": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x"
},
"product_reference": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64"
},
"product_reference": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.aarch64"
},
"product_reference": "dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.ppc64le"
},
"product_reference": "dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.s390x"
},
"product_reference": "dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.x86_64"
},
"product_reference": "dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64"
},
"product_reference": "dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le"
},
"product_reference": "dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x"
},
"product_reference": "dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64"
},
"product_reference": "dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-8.0-0:8.0.29-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.aarch64"
},
"product_reference": "dotnet-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-8.0-0:8.0.29-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.ppc64le"
},
"product_reference": "dotnet-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-8.0-0:8.0.29-1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.s390x"
},
"product_reference": "dotnet-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-8.0-0:8.0.29-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.x86_64"
},
"product_reference": "dotnet-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64"
},
"product_reference": "dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le"
},
"product_reference": "dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x"
},
"product_reference": "dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64"
},
"product_reference": "dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64"
},
"product_reference": "dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le"
},
"product_reference": "dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x"
},
"product_reference": "dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64"
},
"product_reference": "dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-8.0-0:8.0.129-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.aarch64"
},
"product_reference": "dotnet-sdk-8.0-0:8.0.129-1.el10_2.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-8.0-0:8.0.129-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.ppc64le"
},
"product_reference": "dotnet-sdk-8.0-0:8.0.129-1.el10_2.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-8.0-0:8.0.129-1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.s390x"
},
"product_reference": "dotnet-sdk-8.0-0:8.0.129-1.el10_2.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-8.0-0:8.0.129-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.x86_64"
},
"product_reference": "dotnet-sdk-8.0-0:8.0.129-1.el10_2.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64"
},
"product_reference": "dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le"
},
"product_reference": "dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x"
},
"product_reference": "dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64"
},
"product_reference": "dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.aarch64"
},
"product_reference": "dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.ppc64le"
},
"product_reference": "dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.s390x"
},
"product_reference": "dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.x86_64"
},
"product_reference": "dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64"
},
"product_reference": "dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le"
},
"product_reference": "dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x"
},
"product_reference": "dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64"
},
"product_reference": "dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-templates-8.0-0:8.0.129-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.aarch64"
},
"product_reference": "dotnet-templates-8.0-0:8.0.129-1.el10_2.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-templates-8.0-0:8.0.129-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.ppc64le"
},
"product_reference": "dotnet-templates-8.0-0:8.0.129-1.el10_2.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-templates-8.0-0:8.0.129-1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.s390x"
},
"product_reference": "dotnet-templates-8.0-0:8.0.129-1.el10_2.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-templates-8.0-0:8.0.129-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.x86_64"
},
"product_reference": "dotnet-templates-8.0-0:8.0.129-1.el10_2.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet8.0-0:8.0.129-1.el10_2.src as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:dotnet8.0-0:8.0.129-1.el10_2.src"
},
"product_reference": "dotnet8.0-0:8.0.129-1.el10_2.src",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64"
},
"product_reference": "dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le"
},
"product_reference": "dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x"
},
"product_reference": "dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64"
},
"product_reference": "dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64"
},
"product_reference": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le"
},
"product_reference": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x"
},
"product_reference": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64"
},
"product_reference": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64"
},
"product_reference": "dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le"
},
"product_reference": "dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x"
},
"product_reference": "dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64"
},
"product_reference": "dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64"
},
"product_reference": "dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le"
},
"product_reference": "dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x"
},
"product_reference": "dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64"
},
"product_reference": "dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64"
},
"product_reference": "dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le"
},
"product_reference": "dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x"
},
"product_reference": "dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64"
},
"product_reference": "dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.aarch64"
},
"product_reference": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.aarch64",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.ppc64le"
},
"product_reference": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.ppc64le",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.s390x"
},
"product_reference": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.s390x",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.x86_64"
},
"product_reference": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.x86_64",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64"
},
"product_reference": "dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le"
},
"product_reference": "dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x"
},
"product_reference": "dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64"
},
"product_reference": "dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64",
"relates_to_product_reference": "CRB-10.2.Z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-47300",
"cwe": {
"id": "CWE-303",
"name": "Incorrect Implementation of Authentication Algorithm"
},
"discovery_date": "2026-07-14T19:01:28.027271+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2500492"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ASP.NET Core. An authorized attacker can exploit an incorrect implementation of the authentication algorithm over a network. This vulnerability allows the attacker to elevate their privileges, potentially gaining unauthorized access to sensitive resources or performing actions beyond their intended permissions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ASP.NET Core: ASP.NET Core: Privilege Escalation via Incorrect Authentication Algorithm",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet8.0-0:8.0.129-1.el10_2.src",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-47300"
},
{
"category": "external",
"summary": "RHBZ#2500492",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500492"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-47300",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47300"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-47300",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47300"
},
{
"category": "external",
"summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47300",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47300"
}
],
"release_date": "2026-07-14T18:20:12.225000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T04:30:49+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet8.0-0:8.0.129-1.el10_2.src",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41893"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet8.0-0:8.0.129-1.el10_2.src",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ASP.NET Core: ASP.NET Core: Privilege Escalation via Incorrect Authentication Algorithm"
},
{
"cve": "CVE-2026-47302",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-07-14T19:05:21.556064+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2500515"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in .NET where uncontrolled resource allocation can be exploited by an unauthorized attacker over a network. This vulnerability allows the attacker to exhaust available resources, leading to a Denial of Service (DoS) condition. The lack of limits or throttling mechanisms enables an attacker to disrupt the availability of the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: .NET: Denial of Service vulnerability due to uncontrolled resource allocation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet8.0-0:8.0.129-1.el10_2.src",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-47302"
},
{
"category": "external",
"summary": "RHBZ#2500515",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500515"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-47302",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47302"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-47302",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47302"
},
{
"category": "external",
"summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47302",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47302"
}
],
"release_date": "2026-07-14T18:45:32.796000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T04:30:49+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet8.0-0:8.0.129-1.el10_2.src",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41893"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet8.0-0:8.0.129-1.el10_2.src",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet: .NET: Denial of Service vulnerability due to uncontrolled resource allocation"
},
{
"cve": "CVE-2026-47303",
"cwe": {
"id": "CWE-472",
"name": "External Control of Assumed-Immutable Web Parameter"
},
"discovery_date": "2026-07-14T19:03:32.877670+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2500502"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ASP.NET Core. An authorized attacker can exploit this authentication bypass vulnerability over a network by manipulating assumed-immutable data. This can allow the attacker to elevate their privileges within the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ASP.NET Core: ASP.NET Core: Privilege Elevation via Authentication Bypass",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet8.0-0:8.0.129-1.el10_2.src",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-47303"
},
{
"category": "external",
"summary": "RHBZ#2500502",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500502"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-47303",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47303"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-47303",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47303"
},
{
"category": "external",
"summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47303",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47303"
}
],
"release_date": "2026-07-14T18:45:33.438000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T04:30:49+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet8.0-0:8.0.129-1.el10_2.src",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41893"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet8.0-0:8.0.129-1.el10_2.src",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ASP.NET Core: ASP.NET Core: Privilege Elevation via Authentication Bypass"
},
{
"cve": "CVE-2026-47304",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-07-14T19:04:28.997604+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2500509"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in .NET. An unauthorized attacker can exploit this vulnerability over a network due to improper verification of cryptographic signatures. This allows the attacker to bypass a critical security feature, potentially leading to significant compromise of confidentiality, integrity, and availability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: .NET Security Feature Bypass Vulnerability",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet8.0-0:8.0.129-1.el10_2.src",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-47304"
},
{
"category": "external",
"summary": "RHBZ#2500509",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500509"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-47304",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47304"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-47304",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47304"
},
{
"category": "external",
"summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47304",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47304"
}
],
"release_date": "2026-07-14T18:45:33.914000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T04:30:49+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet8.0-0:8.0.129-1.el10_2.src",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41893"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet8.0-0:8.0.129-1.el10_2.src",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet: .NET Security Feature Bypass Vulnerability"
},
{
"cve": "CVE-2026-50524",
"cwe": {
"id": "CWE-1287",
"name": "Improper Validation of Specified Type of Input"
},
"discovery_date": "2026-07-14T20:05:17.686937+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2500593"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in .NET Framework. This improper validation of input allows an unauthorized attacker to remotely deny service over a network. This vulnerability can lead to a Denial of Service (DoS) condition, making the affected system unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: .NET Framework: Denial of Service via improper input validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet8.0-0:8.0.129-1.el10_2.src",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-50524"
},
{
"category": "external",
"summary": "RHBZ#2500593",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500593"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-50524",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50524"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-50524",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-50524"
},
{
"category": "external",
"summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50524",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50524"
}
],
"release_date": "2026-07-14T19:29:53.872000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T04:30:49+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet8.0-0:8.0.129-1.el10_2.src",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41893"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet8.0-0:8.0.129-1.el10_2.src",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet: .NET Framework: Denial of Service via improper input validation"
},
{
"cve": "CVE-2026-50525",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-07-14T20:04:03.113976+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2500580"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in .NET where uncontrolled allocation of resources can lead to a Denial of Service (DoS). An unauthorized remote attacker could exploit this vulnerability by continuously requesting resources without limits or throttling, causing the affected system to become unresponsive or crash. This can disrupt the availability of services running on the .NET framework.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: .NET: Denial of Service due to uncontrolled resource allocation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet8.0-0:8.0.129-1.el10_2.src",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-50525"
},
{
"category": "external",
"summary": "RHBZ#2500580",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500580"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-50525",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50525"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-50525",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-50525"
},
{
"category": "external",
"summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50525",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50525"
}
],
"release_date": "2026-07-14T19:29:54.357000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T04:30:49+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet8.0-0:8.0.129-1.el10_2.src",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41893"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet8.0-0:8.0.129-1.el10_2.src",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet: .NET: Denial of Service due to uncontrolled resource allocation"
},
{
"cve": "CVE-2026-50526",
"cwe": {
"id": "CWE-59",
"name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
},
"discovery_date": "2026-07-14T20:02:30.433807+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2500565"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in .NET. This vulnerability, stemming from improper link resolution before file access, allows an authorized local attacker to perform tampering. This could lead to unauthorized modification of data or system files.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: .NET: Local tampering via improper link resolution",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet8.0-0:8.0.129-1.el10_2.src",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-50526"
},
{
"category": "external",
"summary": "RHBZ#2500565",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500565"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-50526",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50526"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-50526",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-50526"
},
{
"category": "external",
"summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50526",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50526"
}
],
"release_date": "2026-07-14T19:29:54.992000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T04:30:49+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet8.0-0:8.0.129-1.el10_2.src",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41893"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet8.0-0:8.0.129-1.el10_2.src",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "dotnet: .NET: Local tampering via improper link resolution"
},
{
"cve": "CVE-2026-50527",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2026-07-14T20:04:09.962274+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2500581"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in .NET Framework. This vulnerability, a stack-based buffer overflow, allows an unauthorized attacker to remotely exploit the system over a network. Successful exploitation can lead to a denial of service (DoS), making the affected system unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: .NET Framework: Denial of Service via network-based buffer overflow",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet8.0-0:8.0.129-1.el10_2.src",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-50527"
},
{
"category": "external",
"summary": "RHBZ#2500581",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500581"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-50527",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50527"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-50527",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-50527"
},
{
"category": "external",
"summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50527",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50527"
}
],
"release_date": "2026-07-14T19:29:55.564000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T04:30:49+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet8.0-0:8.0.129-1.el10_2.src",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41893"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet8.0-0:8.0.129-1.el10_2.src",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet: .NET Framework: Denial of Service via network-based buffer overflow"
},
{
"cve": "CVE-2026-50528",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-07-14T20:02:07.038095+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2500562"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in .NET where incorrect authorization allows an unauthorized attacker to bypass a security feature over a network. This vulnerability enables an attacker to circumvent intended security controls, potentially leading to unauthorized access or actions within the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: .NET: Security feature bypass due to incorrect authorization",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet8.0-0:8.0.129-1.el10_2.src",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-50528"
},
{
"category": "external",
"summary": "RHBZ#2500562",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500562"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-50528",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50528"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-50528",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-50528"
},
{
"category": "external",
"summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50528",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50528"
}
],
"release_date": "2026-07-14T19:29:56.224000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T04:30:49+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet8.0-0:8.0.129-1.el10_2.src",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41893"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N",
"version": "3.1"
},
"products": [
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet8.0-0:8.0.129-1.el10_2.src",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet: .NET: Security feature bypass due to incorrect authorization"
},
{
"cve": "CVE-2026-50646",
"cwe": {
"id": "CWE-807",
"name": "Reliance on Untrusted Inputs in a Security Decision"
},
"discovery_date": "2026-07-14T20:03:48.442720+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2500577"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in .NET Framework. This protection mechanism failure allows an unauthorized attacker to execute arbitrary code locally. Successful exploitation of this vulnerability can lead to a complete compromise of the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: .NET Framework: Local Code Execution via Protection Mechanism Failure",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet8.0-0:8.0.129-1.el10_2.src",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-50646"
},
{
"category": "external",
"summary": "RHBZ#2500577",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500577"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-50646",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50646"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-50646",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-50646"
},
{
"category": "external",
"summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50646",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50646"
}
],
"release_date": "2026-07-14T19:29:56.821000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T04:30:49+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet8.0-0:8.0.129-1.el10_2.src",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41893"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet8.0-0:8.0.129-1.el10_2.src",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet: .NET Framework: Local Code Execution via Protection Mechanism Failure"
},
{
"cve": "CVE-2026-50648",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-07-14T20:04:45.063188+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2500587"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in .NET Framework. An unauthorized attacker can exploit this vulnerability remotely by causing the system to allocate resources without proper limits or throttling. This uncontrolled resource allocation can lead to a Denial of Service (DoS), making the affected system unresponsive or unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: .NET Framework: Remote Denial of Service due to uncontrolled resource allocation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet8.0-0:8.0.129-1.el10_2.src",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-50648"
},
{
"category": "external",
"summary": "RHBZ#2500587",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500587"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-50648",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50648"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-50648",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-50648"
},
{
"category": "external",
"summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50648",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50648"
}
],
"release_date": "2026-07-14T19:29:57.312000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T04:30:49+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet8.0-0:8.0.129-1.el10_2.src",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41893"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet8.0-0:8.0.129-1.el10_2.src",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet: .NET Framework: Remote Denial of Service due to uncontrolled resource allocation"
},
{
"cve": "CVE-2026-50649",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"discovery_date": "2026-07-14T20:02:12.073604+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2500563"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in .NET. This vulnerability allows an unauthorized attacker to execute code locally by exploiting a deserialization of untrusted data. This means that if an attacker can provide specially crafted data, the .NET application may process it in a way that leads to the execution of malicious code on the system where the application is running.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: .NET: Local code execution via deserialization of untrusted data",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet8.0-0:8.0.129-1.el10_2.src",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-50649"
},
{
"category": "external",
"summary": "RHBZ#2500563",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500563"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-50649",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50649"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-50649",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-50649"
},
{
"category": "external",
"summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50649",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50649"
}
],
"release_date": "2026-07-14T19:29:57.970000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T04:30:49+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet8.0-0:8.0.129-1.el10_2.src",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41893"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet8.0-0:8.0.129-1.el10_2.src",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet: .NET: Local code execution via deserialization of untrusted data"
},
{
"cve": "CVE-2026-50650",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2026-07-14T20:01:20.750427+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2500556"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in .NET Framework. This vulnerability, caused by improper control of code generation, allows an unauthorized attacker to inject malicious code. Successful exploitation can lead to local privilege escalation, enabling the attacker to gain higher access rights on the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: .NET Framework: Privilege escalation via code injection",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet8.0-0:8.0.129-1.el10_2.src",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-50650"
},
{
"category": "external",
"summary": "RHBZ#2500556",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500556"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-50650",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50650"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-50650",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-50650"
},
{
"category": "external",
"summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50650",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50650"
}
],
"release_date": "2026-07-14T19:29:58.620000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T04:30:49+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet8.0-0:8.0.129-1.el10_2.src",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41893"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet8.0-0:8.0.129-1.el10_2.src",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet: .NET Framework: Privilege escalation via code injection"
},
{
"cve": "CVE-2026-50651",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-07-10T20:34:51.149000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2499217"
}
],
"notes": [
{
"category": "description",
"text": ".NET Denial of Service Vulnerability - HTTP/2 SETTINGS/PING ACK flood causing OOM",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: SocketsHttpHandler Http2Connection - HTTP/2 SETTINGS/PING ACK flood causing OOM",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet8.0-0:8.0.129-1.el10_2.src",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-50651"
},
{
"category": "external",
"summary": "RHBZ#2499217",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2499217"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-50651",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50651"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-50651",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-50651"
}
],
"release_date": "2026-07-14T21:37:42.263000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T04:30:49+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet8.0-0:8.0.129-1.el10_2.src",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41893"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet8.0-0:8.0.129-1.el10_2.src",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet: SocketsHttpHandler Http2Connection - HTTP/2 SETTINGS/PING ACK flood causing OOM"
},
{
"cve": "CVE-2026-50659",
"cwe": {
"id": "CWE-838",
"name": "Inappropriate Encoding for Output Context"
},
"discovery_date": "2026-07-14T20:04:53.048725+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2500589"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in .NET. An authorized attacker can exploit this vulnerability by leveraging improper encoding or escaping of output. This allows the attacker to perform spoofing over a network, potentially deceiving users or systems into believing they are interacting with a trusted entity.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": ".NET: .NET: Network Spoofing Vulnerability",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet8.0-0:8.0.129-1.el10_2.src",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-50659"
},
{
"category": "external",
"summary": "RHBZ#2500589",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500589"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-50659",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50659"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-50659",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-50659"
},
{
"category": "external",
"summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50659",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50659"
}
],
"release_date": "2026-07-14T19:40:15.949000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T04:30:49+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet8.0-0:8.0.129-1.el10_2.src",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41893"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet8.0-0:8.0.129-1.el10_2.src",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": ".NET: .NET: Network Spoofing Vulnerability"
},
{
"cve": "CVE-2026-56170",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-07-14T18:06:54.194809+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2500189"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ASP.NET Core. This vulnerability allows an unauthorized remote attacker to cause a Denial of Service (DoS) by allocating resources without proper limits or throttling. This can lead to the affected system becoming unresponsive or unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ASP.NET Core: ASP.NET Core: Denial of Service via uncontrolled resource allocation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet8.0-0:8.0.129-1.el10_2.src",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-56170"
},
{
"category": "external",
"summary": "RHBZ#2500189",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500189"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-56170",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56170"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56170",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56170"
},
{
"category": "external",
"summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56170",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56170"
}
],
"release_date": "2026-07-14T17:05:13.486000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T04:30:49+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet8.0-0:8.0.129-1.el10_2.src",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41893"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet8.0-0:8.0.129-1.el10_2.src",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ASP.NET Core: ASP.NET Core: Denial of Service via uncontrolled resource allocation"
},
{
"cve": "CVE-2026-57108",
"cwe": {
"id": "CWE-843",
"name": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)"
},
"discovery_date": "2026-07-14T18:02:49.265651+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2500109"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in .NET Core. This vulnerability, known as type confusion, allows an unauthorized remote attacker to cause a denial of service (DoS) over a network. By exploiting this flaw, an attacker can make the affected system unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: .NET Core: Denial of Service via type confusion",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet8.0-0:8.0.129-1.el10_2.src",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-57108"
},
{
"category": "external",
"summary": "RHBZ#2500109",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500109"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-57108",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-57108"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-57108",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-57108"
},
{
"category": "external",
"summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57108",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57108"
}
],
"release_date": "2026-07-14T17:09:39.087000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T04:30:49+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet8.0-0:8.0.129-1.el10_2.src",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41893"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-runtime-dbg-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-sdk-dbg-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-targeting-pack-8.0-0:8.0.29-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet-templates-8.0-0:8.0.129-1.el10_2.x86_64",
"AppStream-10.2.Z:dotnet8.0-0:8.0.129-1.el10_2.src",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"AppStream-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el10_2.x86_64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.aarch64",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.ppc64le",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.s390x",
"CRB-10.2.Z:dotnet8.0-debugsource-0:8.0.129-1.el10_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet: .NET Core: Denial of Service via type confusion"
}
]
}
RHSA-2026:41894
Vulnerability from csaf_redhat - Published: 2026-07-20 05:23 - Updated: 2026-07-23 03:46Summary
Red Hat Security Advisory: .NET 8.0 security, bug fix, and enhancement update
Severity
Important
Notes
Topic: An update for .NET 8.0 is now available for Red Hat Enterprise Linux 9.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.
New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.129 and .NET Runtime 8.0.29.
Security Fix(es):
* dotnet: SocketsHttpHandler Http2Connection - HTTP/2 SETTINGS/PING ACK flood causing OOM (CVE-2026-50651)
* dotnet: .NET Core: Denial of Service via type confusion (CVE-2026-57108)
* ASP.NET Core: ASP.NET Core: Denial of Service via uncontrolled resource allocation (CVE-2026-56170)
* ASP.NET Core: ASP.NET Core: Privilege Escalation via Incorrect Authentication Algorithm (CVE-2026-47300)
* ASP.NET Core: ASP.NET Core: Privilege Elevation via Authentication Bypass (CVE-2026-47303)
* dotnet: .NET Security Feature Bypass Vulnerability (CVE-2026-47304)
* dotnet: .NET: Denial of Service vulnerability due to uncontrolled resource allocation (CVE-2026-47302)
* dotnet: .NET Framework: Privilege escalation via code injection (CVE-2026-50650)
* dotnet: .NET: Security feature bypass due to incorrect authorization (CVE-2026-50528)
* dotnet: .NET: Local code execution via deserialization of untrusted data (CVE-2026-50649)
* dotnet: .NET: Local tampering via improper link resolution (CVE-2026-50526)
* dotnet: .NET Framework: Local Code Execution via Protection Mechanism Failure (CVE-2026-50646)
* dotnet: .NET: Denial of Service due to uncontrolled resource allocation (CVE-2026-50525)
* dotnet: .NET Framework: Denial of Service via network-based buffer overflow (CVE-2026-50527)
* dotnet: .NET Framework: Remote Denial of Service due to uncontrolled resource allocation (CVE-2026-50648)
* .NET: .NET: Network Spoofing Vulnerability (CVE-2026-50659)
* dotnet: .NET Framework: Denial of Service via improper input validation (CVE-2026-50524)
Bug Fix(es) and Enhancement(s):
* Update .NET 8.0 to SDK 8.0.129 and Runtime 8.0.29 [rhel-9.8.z] (JIRA:RHEL-192467)
* dotnet8.0: Reduce time to detect hanging builds during .NET RPM builds (c9s) [rhel-9.8.z] (JIRA:RHEL-192337)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in ASP.NET Core. An authorized attacker can exploit an incorrect implementation of the authentication algorithm over a network. This vulnerability allows the attacker to elevate their privileges, potentially gaining unauthorized access to sensitive resources or performing actions beyond their intended permissions.
8.8 (High)
Affected products
Fixed
97 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-0:8.0.129-1.el9_8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in .NET where uncontrolled resource allocation can be exploited by an unauthorized attacker over a network. This vulnerability allows the attacker to exhaust available resources, leading to a Denial of Service (DoS) condition. The lack of limits or throttling mechanisms enables an attacker to disrupt the availability of the affected system.
7.5 (High)
Affected products
Fixed
97 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-0:8.0.129-1.el9_8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in ASP.NET Core. An authorized attacker can exploit this authentication bypass vulnerability over a network by manipulating assumed-immutable data. This can allow the attacker to elevate their privileges within the system.
8.8 (High)
Affected products
Fixed
97 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-0:8.0.129-1.el9_8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in .NET. An unauthorized attacker can exploit this vulnerability over a network due to improper verification of cryptographic signatures. This allows the attacker to bypass a critical security feature, potentially leading to significant compromise of confidentiality, integrity, and availability.
8.1 (High)
Affected products
Fixed
97 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-0:8.0.129-1.el9_8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in .NET Framework. This improper validation of input allows an unauthorized attacker to remotely deny service over a network. This vulnerability can lead to a Denial of Service (DoS) condition, making the affected system unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
97 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-0:8.0.129-1.el9_8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in .NET where uncontrolled allocation of resources can lead to a Denial of Service (DoS). An unauthorized remote attacker could exploit this vulnerability by continuously requesting resources without limits or throttling, causing the affected system to become unresponsive or crash. This can disrupt the availability of services running on the .NET framework.
7.5 (High)
Affected products
Fixed
97 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-0:8.0.129-1.el9_8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in .NET. This vulnerability, stemming from improper link resolution before file access, allows an authorized local attacker to perform tampering. This could lead to unauthorized modification of data or system files.
7.0 (High)
Affected products
Fixed
97 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-0:8.0.129-1.el9_8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A flaw was found in .NET Framework. This vulnerability, a stack-based buffer overflow, allows an unauthorized attacker to remotely exploit the system over a network. Successful exploitation can lead to a denial of service (DoS), making the affected system unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
97 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-0:8.0.129-1.el9_8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in .NET where incorrect authorization allows an unauthorized attacker to bypass a security feature over a network. This vulnerability enables an attacker to circumvent intended security controls, potentially leading to unauthorized access or actions within the affected system.
8.2 (High)
Affected products
Fixed
97 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-0:8.0.129-1.el9_8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in .NET Framework. This protection mechanism failure allows an unauthorized attacker to execute arbitrary code locally. Successful exploitation of this vulnerability can lead to a complete compromise of the affected system.
7.8 (High)
Affected products
Fixed
97 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-0:8.0.129-1.el9_8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in .NET Framework. An unauthorized attacker can exploit this vulnerability remotely by causing the system to allocate resources without proper limits or throttling. This uncontrolled resource allocation can lead to a Denial of Service (DoS), making the affected system unresponsive or unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
97 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-0:8.0.129-1.el9_8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in .NET. This vulnerability allows an unauthorized attacker to execute code locally by exploiting a deserialization of untrusted data. This means that if an attacker can provide specially crafted data, the .NET application may process it in a way that leads to the execution of malicious code on the system where the application is running.
7.8 (High)
Affected products
Fixed
97 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-0:8.0.129-1.el9_8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in .NET Framework. This vulnerability, caused by improper control of code generation, allows an unauthorized attacker to inject malicious code. Successful exploitation can lead to local privilege escalation, enabling the attacker to gain higher access rights on the affected system.
7.8 (High)
Affected products
Fixed
97 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-0:8.0.129-1.el9_8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
.NET Denial of Service Vulnerability - HTTP/2 SETTINGS/PING ACK flood causing OOM
7.5 (High)
Affected products
Fixed
97 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-0:8.0.129-1.el9_8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in .NET. An authorized attacker can exploit this vulnerability by leveraging improper encoding or escaping of output. This allows the attacker to perform spoofing over a network, potentially deceiving users or systems into believing they are interacting with a trusted entity.
6.5 (Medium)
Affected products
Fixed
97 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-0:8.0.129-1.el9_8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A flaw was found in ASP.NET Core. This vulnerability allows an unauthorized remote attacker to cause a Denial of Service (DoS) by allocating resources without proper limits or throttling. This can lead to the affected system becoming unresponsive or unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
97 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-0:8.0.129-1.el9_8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in .NET Core. This vulnerability, known as type confusion, allows an unauthorized remote attacker to cause a denial of service (DoS) over a network. By exploiting this flaw, an attacker can make the affected system unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
97 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-0:8.0.129-1.el9_8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
References
104 references
| URL | Category |
|---|---|
| https://access.redhat.com/errata/RHSA-2026:41894 | self |
| https://access.redhat.com/security/updates/classi… | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2499217 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2500109 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2500189 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2500492 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2500502 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2500509 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2500515 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2500556 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2500562 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2500563 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2500565 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2500577 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2500580 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2500581 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2500587 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2500589 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2500593 | external |
| https://security.access.redhat.com/data/csaf/v2/a… | self |
| https://access.redhat.com/security/cve/CVE-2026-47300 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2500492 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-47300 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-47300 | external |
| https://msrc.microsoft.com/update-guide/vulnerabi… | external |
| https://access.redhat.com/security/cve/CVE-2026-47302 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2500515 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-47302 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-47302 | external |
| https://msrc.microsoft.com/update-guide/vulnerabi… | external |
| https://access.redhat.com/security/cve/CVE-2026-47303 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2500502 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-47303 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-47303 | external |
| https://msrc.microsoft.com/update-guide/vulnerabi… | external |
| https://access.redhat.com/security/cve/CVE-2026-47304 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2500509 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-47304 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-47304 | external |
| https://msrc.microsoft.com/update-guide/vulnerabi… | external |
| https://access.redhat.com/security/cve/CVE-2026-50524 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2500593 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-50524 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-50524 | external |
| https://msrc.microsoft.com/update-guide/vulnerabi… | external |
| https://access.redhat.com/security/cve/CVE-2026-50525 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2500580 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-50525 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-50525 | external |
| https://msrc.microsoft.com/update-guide/vulnerabi… | external |
| https://access.redhat.com/security/cve/CVE-2026-50526 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2500565 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-50526 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-50526 | external |
| https://msrc.microsoft.com/update-guide/vulnerabi… | external |
| https://access.redhat.com/security/cve/CVE-2026-50527 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2500581 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-50527 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-50527 | external |
| https://msrc.microsoft.com/update-guide/vulnerabi… | external |
| https://access.redhat.com/security/cve/CVE-2026-50528 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2500562 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-50528 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-50528 | external |
| https://msrc.microsoft.com/update-guide/vulnerabi… | external |
| https://access.redhat.com/security/cve/CVE-2026-50646 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2500577 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-50646 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-50646 | external |
| https://msrc.microsoft.com/update-guide/vulnerabi… | external |
| https://access.redhat.com/security/cve/CVE-2026-50648 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2500587 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-50648 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-50648 | external |
| https://msrc.microsoft.com/update-guide/vulnerabi… | external |
| https://access.redhat.com/security/cve/CVE-2026-50649 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2500563 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-50649 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-50649 | external |
| https://msrc.microsoft.com/update-guide/vulnerabi… | external |
| https://access.redhat.com/security/cve/CVE-2026-50650 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2500556 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-50650 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-50650 | external |
| https://msrc.microsoft.com/update-guide/vulnerabi… | external |
| https://access.redhat.com/security/cve/CVE-2026-50651 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2499217 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-50651 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-50651 | external |
| https://access.redhat.com/security/cve/CVE-2026-50659 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2500589 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-50659 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-50659 | external |
| https://msrc.microsoft.com/update-guide/vulnerabi… | external |
| https://access.redhat.com/security/cve/CVE-2026-56170 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2500189 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-56170 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-56170 | external |
| https://msrc.microsoft.com/update-guide/vulnerabi… | external |
| https://access.redhat.com/security/cve/CVE-2026-57108 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2500109 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-57108 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-57108 | external |
| https://msrc.microsoft.com/update-guide/vulnerabi… | external |
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for .NET 8.0 is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": ".NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.\n\nNew versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.129 and .NET Runtime 8.0.29.\n\nSecurity Fix(es):\n\n* dotnet: SocketsHttpHandler Http2Connection - HTTP/2 SETTINGS/PING ACK flood causing OOM (CVE-2026-50651)\n\n* dotnet: .NET Core: Denial of Service via type confusion (CVE-2026-57108)\n\n* ASP.NET Core: ASP.NET Core: Denial of Service via uncontrolled resource allocation (CVE-2026-56170)\n\n* ASP.NET Core: ASP.NET Core: Privilege Escalation via Incorrect Authentication Algorithm (CVE-2026-47300)\n\n* ASP.NET Core: ASP.NET Core: Privilege Elevation via Authentication Bypass (CVE-2026-47303)\n\n* dotnet: .NET Security Feature Bypass Vulnerability (CVE-2026-47304)\n\n* dotnet: .NET: Denial of Service vulnerability due to uncontrolled resource allocation (CVE-2026-47302)\n\n* dotnet: .NET Framework: Privilege escalation via code injection (CVE-2026-50650)\n\n* dotnet: .NET: Security feature bypass due to incorrect authorization (CVE-2026-50528)\n\n* dotnet: .NET: Local code execution via deserialization of untrusted data (CVE-2026-50649)\n\n* dotnet: .NET: Local tampering via improper link resolution (CVE-2026-50526)\n\n* dotnet: .NET Framework: Local Code Execution via Protection Mechanism Failure (CVE-2026-50646)\n\n* dotnet: .NET: Denial of Service due to uncontrolled resource allocation (CVE-2026-50525)\n\n* dotnet: .NET Framework: Denial of Service via network-based buffer overflow (CVE-2026-50527)\n\n* dotnet: .NET Framework: Remote Denial of Service due to uncontrolled resource allocation (CVE-2026-50648)\n\n* .NET: .NET: Network Spoofing Vulnerability (CVE-2026-50659)\n\n* dotnet: .NET Framework: Denial of Service via improper input validation (CVE-2026-50524)\n\nBug Fix(es) and Enhancement(s):\n\n* Update .NET 8.0 to SDK 8.0.129 and Runtime 8.0.29 [rhel-9.8.z] (JIRA:RHEL-192467)\n\n* dotnet8.0: Reduce time to detect hanging builds during .NET RPM builds (c9s) [rhel-9.8.z] (JIRA:RHEL-192337)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:41894",
"url": "https://access.redhat.com/errata/RHSA-2026:41894"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2499217",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2499217"
},
{
"category": "external",
"summary": "2500109",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500109"
},
{
"category": "external",
"summary": "2500189",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500189"
},
{
"category": "external",
"summary": "2500492",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500492"
},
{
"category": "external",
"summary": "2500502",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500502"
},
{
"category": "external",
"summary": "2500509",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500509"
},
{
"category": "external",
"summary": "2500515",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500515"
},
{
"category": "external",
"summary": "2500556",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500556"
},
{
"category": "external",
"summary": "2500562",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500562"
},
{
"category": "external",
"summary": "2500563",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500563"
},
{
"category": "external",
"summary": "2500565",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500565"
},
{
"category": "external",
"summary": "2500577",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500577"
},
{
"category": "external",
"summary": "2500580",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500580"
},
{
"category": "external",
"summary": "2500581",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500581"
},
{
"category": "external",
"summary": "2500587",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500587"
},
{
"category": "external",
"summary": "2500589",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500589"
},
{
"category": "external",
"summary": "2500593",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500593"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_41894.json"
}
],
"title": "Red Hat Security Advisory: .NET 8.0 security, bug fix, and enhancement update",
"tracking": {
"current_release_date": "2026-07-23T03:46:04+00:00",
"generator": {
"date": "2026-07-23T03:46:04+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.7"
}
},
"id": "RHSA-2026:41894",
"initial_release_date": "2026-07-20T05:23:55+00:00",
"revision_history": [
{
"date": "2026-07-20T05:23:55+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-20T05:23:55+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-23T03:46:04+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream (v. 9)",
"product": {
"name": "Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:9::appstream"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product": {
"name": "Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:9::crb"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.aarch64",
"product": {
"name": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.aarch64",
"product_id": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-8.0-source-built-artifacts@8.0.129-1.el9_8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"product": {
"name": "dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"product_id": "dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet8.0-debugsource@8.0.129-1.el9_8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"product": {
"name": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"product_id": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-8.0-debuginfo@8.0.29-1.el9_8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"product": {
"name": "dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"product_id": "dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-8.0-debuginfo@8.0.29-1.el9_8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"product": {
"name": "dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"product_id": "dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-8.0-debuginfo@8.0.29-1.el9_8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"product": {
"name": "dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"product_id": "dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-8.0-debuginfo@8.0.129-1.el9_8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"product": {
"name": "dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"product_id": "dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet8.0-debuginfo@8.0.129-1.el9_8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"product": {
"name": "aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"product_id": "aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-8.0@8.0.29-1.el9_8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"product": {
"name": "aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"product_id": "aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-dbg-8.0@8.0.29-1.el9_8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"product": {
"name": "aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"product_id": "aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-8.0@8.0.29-1.el9_8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"product": {
"name": "dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"product_id": "dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-8.0@8.0.29-1.el9_8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.aarch64",
"product": {
"name": "dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.aarch64",
"product_id": "dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-8.0@8.0.29-1.el9_8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"product": {
"name": "dotnet-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"product_id": "dotnet-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-8.0@8.0.29-1.el9_8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"product": {
"name": "dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"product_id": "dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-dbg-8.0@8.0.29-1.el9_8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-8.0-0:8.0.129-1.el9_8.aarch64",
"product": {
"name": "dotnet-sdk-8.0-0:8.0.129-1.el9_8.aarch64",
"product_id": "dotnet-sdk-8.0-0:8.0.129-1.el9_8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-8.0@8.0.129-1.el9_8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.aarch64",
"product": {
"name": "dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.aarch64",
"product_id": "dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-dbg-8.0@8.0.129-1.el9_8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"product": {
"name": "dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"product_id": "dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-targeting-pack-8.0@8.0.29-1.el9_8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-templates-8.0-0:8.0.129-1.el9_8.aarch64",
"product": {
"name": "dotnet-templates-8.0-0:8.0.129-1.el9_8.aarch64",
"product_id": "dotnet-templates-8.0-0:8.0.129-1.el9_8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-templates-8.0@8.0.129-1.el9_8?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.ppc64le",
"product": {
"name": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.ppc64le",
"product_id": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-8.0-source-built-artifacts@8.0.129-1.el9_8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"product": {
"name": "dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"product_id": "dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet8.0-debugsource@8.0.129-1.el9_8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"product": {
"name": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"product_id": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-8.0-debuginfo@8.0.29-1.el9_8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"product": {
"name": "dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"product_id": "dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-8.0-debuginfo@8.0.29-1.el9_8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"product": {
"name": "dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"product_id": "dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-8.0-debuginfo@8.0.29-1.el9_8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"product": {
"name": "dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"product_id": "dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-8.0-debuginfo@8.0.129-1.el9_8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"product": {
"name": "dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"product_id": "dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet8.0-debuginfo@8.0.129-1.el9_8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"product": {
"name": "aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"product_id": "aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-8.0@8.0.29-1.el9_8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"product": {
"name": "aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"product_id": "aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-dbg-8.0@8.0.29-1.el9_8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"product": {
"name": "aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"product_id": "aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-8.0@8.0.29-1.el9_8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"product": {
"name": "dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"product_id": "dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-8.0@8.0.29-1.el9_8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.ppc64le",
"product": {
"name": "dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.ppc64le",
"product_id": "dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-8.0@8.0.29-1.el9_8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"product": {
"name": "dotnet-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"product_id": "dotnet-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-8.0@8.0.29-1.el9_8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"product": {
"name": "dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"product_id": "dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-dbg-8.0@8.0.29-1.el9_8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-8.0-0:8.0.129-1.el9_8.ppc64le",
"product": {
"name": "dotnet-sdk-8.0-0:8.0.129-1.el9_8.ppc64le",
"product_id": "dotnet-sdk-8.0-0:8.0.129-1.el9_8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-8.0@8.0.129-1.el9_8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.ppc64le",
"product": {
"name": "dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.ppc64le",
"product_id": "dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-dbg-8.0@8.0.129-1.el9_8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"product": {
"name": "dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"product_id": "dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-targeting-pack-8.0@8.0.29-1.el9_8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-templates-8.0-0:8.0.129-1.el9_8.ppc64le",
"product": {
"name": "dotnet-templates-8.0-0:8.0.129-1.el9_8.ppc64le",
"product_id": "dotnet-templates-8.0-0:8.0.129-1.el9_8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-templates-8.0@8.0.129-1.el9_8?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.x86_64",
"product": {
"name": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.x86_64",
"product_id": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-8.0-source-built-artifacts@8.0.129-1.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64",
"product": {
"name": "dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64",
"product_id": "dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet8.0-debugsource@8.0.129-1.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"product": {
"name": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"product_id": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-8.0-debuginfo@8.0.29-1.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"product": {
"name": "dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"product_id": "dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-8.0-debuginfo@8.0.29-1.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"product": {
"name": "dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"product_id": "dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-8.0-debuginfo@8.0.29-1.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"product": {
"name": "dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"product_id": "dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-8.0-debuginfo@8.0.129-1.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"product": {
"name": "dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"product_id": "dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet8.0-debuginfo@8.0.129-1.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"product": {
"name": "aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"product_id": "aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-8.0@8.0.29-1.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"product": {
"name": "aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"product_id": "aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-dbg-8.0@8.0.29-1.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"product": {
"name": "aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"product_id": "aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-8.0@8.0.29-1.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"product": {
"name": "dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"product_id": "dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-8.0@8.0.29-1.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.x86_64",
"product": {
"name": "dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.x86_64",
"product_id": "dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-8.0@8.0.29-1.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"product": {
"name": "dotnet-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"product_id": "dotnet-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-8.0@8.0.29-1.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"product": {
"name": "dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"product_id": "dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-dbg-8.0@8.0.29-1.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-8.0-0:8.0.129-1.el9_8.x86_64",
"product": {
"name": "dotnet-sdk-8.0-0:8.0.129-1.el9_8.x86_64",
"product_id": "dotnet-sdk-8.0-0:8.0.129-1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-8.0@8.0.129-1.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.x86_64",
"product": {
"name": "dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.x86_64",
"product_id": "dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-dbg-8.0@8.0.129-1.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"product": {
"name": "dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"product_id": "dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-targeting-pack-8.0@8.0.29-1.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-templates-8.0-0:8.0.129-1.el9_8.x86_64",
"product": {
"name": "dotnet-templates-8.0-0:8.0.129-1.el9_8.x86_64",
"product_id": "dotnet-templates-8.0-0:8.0.129-1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-templates-8.0@8.0.129-1.el9_8?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.s390x",
"product": {
"name": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.s390x",
"product_id": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-8.0-source-built-artifacts@8.0.129-1.el9_8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"product": {
"name": "dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"product_id": "dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet8.0-debugsource@8.0.129-1.el9_8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"product": {
"name": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"product_id": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-8.0-debuginfo@8.0.29-1.el9_8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"product": {
"name": "dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"product_id": "dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-8.0-debuginfo@8.0.29-1.el9_8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"product": {
"name": "dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"product_id": "dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-8.0-debuginfo@8.0.29-1.el9_8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"product": {
"name": "dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"product_id": "dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-8.0-debuginfo@8.0.129-1.el9_8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"product": {
"name": "dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"product_id": "dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet8.0-debuginfo@8.0.129-1.el9_8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"product": {
"name": "aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"product_id": "aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-8.0@8.0.29-1.el9_8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"product": {
"name": "aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"product_id": "aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-dbg-8.0@8.0.29-1.el9_8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"product": {
"name": "aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"product_id": "aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-8.0@8.0.29-1.el9_8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.s390x",
"product": {
"name": "dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.s390x",
"product_id": "dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-8.0@8.0.29-1.el9_8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.s390x",
"product": {
"name": "dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.s390x",
"product_id": "dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-8.0@8.0.29-1.el9_8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"product": {
"name": "dotnet-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"product_id": "dotnet-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-8.0@8.0.29-1.el9_8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"product": {
"name": "dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"product_id": "dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-dbg-8.0@8.0.29-1.el9_8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-8.0-0:8.0.129-1.el9_8.s390x",
"product": {
"name": "dotnet-sdk-8.0-0:8.0.129-1.el9_8.s390x",
"product_id": "dotnet-sdk-8.0-0:8.0.129-1.el9_8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-8.0@8.0.129-1.el9_8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.s390x",
"product": {
"name": "dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.s390x",
"product_id": "dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-dbg-8.0@8.0.129-1.el9_8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"product": {
"name": "dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"product_id": "dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-targeting-pack-8.0@8.0.29-1.el9_8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-templates-8.0-0:8.0.129-1.el9_8.s390x",
"product": {
"name": "dotnet-templates-8.0-0:8.0.129-1.el9_8.s390x",
"product_id": "dotnet-templates-8.0-0:8.0.129-1.el9_8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-templates-8.0@8.0.129-1.el9_8?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "dotnet8.0-0:8.0.129-1.el9_8.src",
"product": {
"name": "dotnet8.0-0:8.0.129-1.el9_8.src",
"product_id": "dotnet8.0-0:8.0.129-1.el9_8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet8.0@8.0.129-1.el9_8?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.aarch64"
},
"product_reference": "aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.ppc64le"
},
"product_reference": "aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.s390x"
},
"product_reference": "aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.x86_64"
},
"product_reference": "aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64"
},
"product_reference": "aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le"
},
"product_reference": "aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x"
},
"product_reference": "aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64"
},
"product_reference": "aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64"
},
"product_reference": "aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le"
},
"product_reference": "aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x"
},
"product_reference": "aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64"
},
"product_reference": "aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.aarch64"
},
"product_reference": "dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.ppc64le"
},
"product_reference": "dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.s390x"
},
"product_reference": "dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.s390x",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.x86_64"
},
"product_reference": "dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64"
},
"product_reference": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le"
},
"product_reference": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x"
},
"product_reference": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64"
},
"product_reference": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.aarch64"
},
"product_reference": "dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.aarch64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.ppc64le"
},
"product_reference": "dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.ppc64le",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.s390x"
},
"product_reference": "dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.s390x",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.x86_64"
},
"product_reference": "dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64"
},
"product_reference": "dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le"
},
"product_reference": "dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x"
},
"product_reference": "dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64"
},
"product_reference": "dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-8.0-0:8.0.29-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.aarch64"
},
"product_reference": "dotnet-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-8.0-0:8.0.29-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.ppc64le"
},
"product_reference": "dotnet-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-8.0-0:8.0.29-1.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.s390x"
},
"product_reference": "dotnet-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-8.0-0:8.0.29-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.x86_64"
},
"product_reference": "dotnet-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64"
},
"product_reference": "dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le"
},
"product_reference": "dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x"
},
"product_reference": "dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64"
},
"product_reference": "dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64"
},
"product_reference": "dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le"
},
"product_reference": "dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x"
},
"product_reference": "dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64"
},
"product_reference": "dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-8.0-0:8.0.129-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.aarch64"
},
"product_reference": "dotnet-sdk-8.0-0:8.0.129-1.el9_8.aarch64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-8.0-0:8.0.129-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.ppc64le"
},
"product_reference": "dotnet-sdk-8.0-0:8.0.129-1.el9_8.ppc64le",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-8.0-0:8.0.129-1.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.s390x"
},
"product_reference": "dotnet-sdk-8.0-0:8.0.129-1.el9_8.s390x",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-8.0-0:8.0.129-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.x86_64"
},
"product_reference": "dotnet-sdk-8.0-0:8.0.129-1.el9_8.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64"
},
"product_reference": "dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le"
},
"product_reference": "dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x"
},
"product_reference": "dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64"
},
"product_reference": "dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.aarch64"
},
"product_reference": "dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.aarch64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.ppc64le"
},
"product_reference": "dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.ppc64le",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.s390x"
},
"product_reference": "dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.s390x",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.x86_64"
},
"product_reference": "dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64"
},
"product_reference": "dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le"
},
"product_reference": "dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x"
},
"product_reference": "dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64"
},
"product_reference": "dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-templates-8.0-0:8.0.129-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.aarch64"
},
"product_reference": "dotnet-templates-8.0-0:8.0.129-1.el9_8.aarch64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-templates-8.0-0:8.0.129-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.ppc64le"
},
"product_reference": "dotnet-templates-8.0-0:8.0.129-1.el9_8.ppc64le",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-templates-8.0-0:8.0.129-1.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.s390x"
},
"product_reference": "dotnet-templates-8.0-0:8.0.129-1.el9_8.s390x",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-templates-8.0-0:8.0.129-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.x86_64"
},
"product_reference": "dotnet-templates-8.0-0:8.0.129-1.el9_8.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet8.0-0:8.0.129-1.el9_8.src as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-0:8.0.129-1.el9_8.src"
},
"product_reference": "dotnet8.0-0:8.0.129-1.el9_8.src",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64"
},
"product_reference": "dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le"
},
"product_reference": "dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x"
},
"product_reference": "dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64"
},
"product_reference": "dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64"
},
"product_reference": "dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le"
},
"product_reference": "dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x"
},
"product_reference": "dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64"
},
"product_reference": "dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64"
},
"product_reference": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le"
},
"product_reference": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x"
},
"product_reference": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64"
},
"product_reference": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64"
},
"product_reference": "dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le"
},
"product_reference": "dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x"
},
"product_reference": "dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64"
},
"product_reference": "dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64"
},
"product_reference": "dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le"
},
"product_reference": "dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x"
},
"product_reference": "dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64"
},
"product_reference": "dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64"
},
"product_reference": "dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le"
},
"product_reference": "dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x"
},
"product_reference": "dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64"
},
"product_reference": "dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.aarch64"
},
"product_reference": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.aarch64",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.ppc64le"
},
"product_reference": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.ppc64le",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.s390x"
},
"product_reference": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.s390x",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.x86_64"
},
"product_reference": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.x86_64",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64"
},
"product_reference": "dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le"
},
"product_reference": "dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x"
},
"product_reference": "dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64"
},
"product_reference": "dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64"
},
"product_reference": "dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le"
},
"product_reference": "dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x"
},
"product_reference": "dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64"
},
"product_reference": "dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-47300",
"cwe": {
"id": "CWE-303",
"name": "Incorrect Implementation of Authentication Algorithm"
},
"discovery_date": "2026-07-14T19:01:28.027271+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2500492"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ASP.NET Core. An authorized attacker can exploit an incorrect implementation of the authentication algorithm over a network. This vulnerability allows the attacker to elevate their privileges, potentially gaining unauthorized access to sensitive resources or performing actions beyond their intended permissions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ASP.NET Core: ASP.NET Core: Privilege Escalation via Incorrect Authentication Algorithm",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-0:8.0.129-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-47300"
},
{
"category": "external",
"summary": "RHBZ#2500492",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500492"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-47300",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47300"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-47300",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47300"
},
{
"category": "external",
"summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47300",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47300"
}
],
"release_date": "2026-07-14T18:20:12.225000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T05:23:55+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-0:8.0.129-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41894"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-0:8.0.129-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ASP.NET Core: ASP.NET Core: Privilege Escalation via Incorrect Authentication Algorithm"
},
{
"cve": "CVE-2026-47302",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-07-14T19:05:21.556064+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2500515"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in .NET where uncontrolled resource allocation can be exploited by an unauthorized attacker over a network. This vulnerability allows the attacker to exhaust available resources, leading to a Denial of Service (DoS) condition. The lack of limits or throttling mechanisms enables an attacker to disrupt the availability of the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: .NET: Denial of Service vulnerability due to uncontrolled resource allocation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-0:8.0.129-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-47302"
},
{
"category": "external",
"summary": "RHBZ#2500515",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500515"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-47302",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47302"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-47302",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47302"
},
{
"category": "external",
"summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47302",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47302"
}
],
"release_date": "2026-07-14T18:45:32.796000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T05:23:55+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-0:8.0.129-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41894"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-0:8.0.129-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet: .NET: Denial of Service vulnerability due to uncontrolled resource allocation"
},
{
"cve": "CVE-2026-47303",
"cwe": {
"id": "CWE-472",
"name": "External Control of Assumed-Immutable Web Parameter"
},
"discovery_date": "2026-07-14T19:03:32.877670+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2500502"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ASP.NET Core. An authorized attacker can exploit this authentication bypass vulnerability over a network by manipulating assumed-immutable data. This can allow the attacker to elevate their privileges within the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ASP.NET Core: ASP.NET Core: Privilege Elevation via Authentication Bypass",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-0:8.0.129-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-47303"
},
{
"category": "external",
"summary": "RHBZ#2500502",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500502"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-47303",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47303"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-47303",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47303"
},
{
"category": "external",
"summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47303",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47303"
}
],
"release_date": "2026-07-14T18:45:33.438000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T05:23:55+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-0:8.0.129-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41894"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-0:8.0.129-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ASP.NET Core: ASP.NET Core: Privilege Elevation via Authentication Bypass"
},
{
"cve": "CVE-2026-47304",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-07-14T19:04:28.997604+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2500509"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in .NET. An unauthorized attacker can exploit this vulnerability over a network due to improper verification of cryptographic signatures. This allows the attacker to bypass a critical security feature, potentially leading to significant compromise of confidentiality, integrity, and availability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: .NET Security Feature Bypass Vulnerability",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-0:8.0.129-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-47304"
},
{
"category": "external",
"summary": "RHBZ#2500509",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500509"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-47304",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47304"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-47304",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47304"
},
{
"category": "external",
"summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47304",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47304"
}
],
"release_date": "2026-07-14T18:45:33.914000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T05:23:55+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-0:8.0.129-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41894"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-0:8.0.129-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet: .NET Security Feature Bypass Vulnerability"
},
{
"cve": "CVE-2026-50524",
"cwe": {
"id": "CWE-1287",
"name": "Improper Validation of Specified Type of Input"
},
"discovery_date": "2026-07-14T20:05:17.686937+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2500593"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in .NET Framework. This improper validation of input allows an unauthorized attacker to remotely deny service over a network. This vulnerability can lead to a Denial of Service (DoS) condition, making the affected system unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: .NET Framework: Denial of Service via improper input validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-0:8.0.129-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-50524"
},
{
"category": "external",
"summary": "RHBZ#2500593",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500593"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-50524",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50524"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-50524",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-50524"
},
{
"category": "external",
"summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50524",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50524"
}
],
"release_date": "2026-07-14T19:29:53.872000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T05:23:55+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-0:8.0.129-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41894"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-0:8.0.129-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet: .NET Framework: Denial of Service via improper input validation"
},
{
"cve": "CVE-2026-50525",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-07-14T20:04:03.113976+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2500580"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in .NET where uncontrolled allocation of resources can lead to a Denial of Service (DoS). An unauthorized remote attacker could exploit this vulnerability by continuously requesting resources without limits or throttling, causing the affected system to become unresponsive or crash. This can disrupt the availability of services running on the .NET framework.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: .NET: Denial of Service due to uncontrolled resource allocation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-0:8.0.129-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-50525"
},
{
"category": "external",
"summary": "RHBZ#2500580",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500580"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-50525",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50525"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-50525",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-50525"
},
{
"category": "external",
"summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50525",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50525"
}
],
"release_date": "2026-07-14T19:29:54.357000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T05:23:55+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-0:8.0.129-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41894"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-0:8.0.129-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet: .NET: Denial of Service due to uncontrolled resource allocation"
},
{
"cve": "CVE-2026-50526",
"cwe": {
"id": "CWE-59",
"name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
},
"discovery_date": "2026-07-14T20:02:30.433807+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2500565"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in .NET. This vulnerability, stemming from improper link resolution before file access, allows an authorized local attacker to perform tampering. This could lead to unauthorized modification of data or system files.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: .NET: Local tampering via improper link resolution",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-0:8.0.129-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-50526"
},
{
"category": "external",
"summary": "RHBZ#2500565",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500565"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-50526",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50526"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-50526",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-50526"
},
{
"category": "external",
"summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50526",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50526"
}
],
"release_date": "2026-07-14T19:29:54.992000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T05:23:55+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-0:8.0.129-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41894"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-0:8.0.129-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "dotnet: .NET: Local tampering via improper link resolution"
},
{
"cve": "CVE-2026-50527",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2026-07-14T20:04:09.962274+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2500581"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in .NET Framework. This vulnerability, a stack-based buffer overflow, allows an unauthorized attacker to remotely exploit the system over a network. Successful exploitation can lead to a denial of service (DoS), making the affected system unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: .NET Framework: Denial of Service via network-based buffer overflow",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-0:8.0.129-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-50527"
},
{
"category": "external",
"summary": "RHBZ#2500581",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500581"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-50527",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50527"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-50527",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-50527"
},
{
"category": "external",
"summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50527",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50527"
}
],
"release_date": "2026-07-14T19:29:55.564000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T05:23:55+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-0:8.0.129-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41894"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-0:8.0.129-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet: .NET Framework: Denial of Service via network-based buffer overflow"
},
{
"cve": "CVE-2026-50528",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-07-14T20:02:07.038095+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2500562"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in .NET where incorrect authorization allows an unauthorized attacker to bypass a security feature over a network. This vulnerability enables an attacker to circumvent intended security controls, potentially leading to unauthorized access or actions within the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: .NET: Security feature bypass due to incorrect authorization",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-0:8.0.129-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-50528"
},
{
"category": "external",
"summary": "RHBZ#2500562",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500562"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-50528",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50528"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-50528",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-50528"
},
{
"category": "external",
"summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50528",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50528"
}
],
"release_date": "2026-07-14T19:29:56.224000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T05:23:55+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-0:8.0.129-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41894"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-0:8.0.129-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet: .NET: Security feature bypass due to incorrect authorization"
},
{
"cve": "CVE-2026-50646",
"cwe": {
"id": "CWE-807",
"name": "Reliance on Untrusted Inputs in a Security Decision"
},
"discovery_date": "2026-07-14T20:03:48.442720+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2500577"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in .NET Framework. This protection mechanism failure allows an unauthorized attacker to execute arbitrary code locally. Successful exploitation of this vulnerability can lead to a complete compromise of the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: .NET Framework: Local Code Execution via Protection Mechanism Failure",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-0:8.0.129-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-50646"
},
{
"category": "external",
"summary": "RHBZ#2500577",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500577"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-50646",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50646"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-50646",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-50646"
},
{
"category": "external",
"summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50646",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50646"
}
],
"release_date": "2026-07-14T19:29:56.821000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T05:23:55+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-0:8.0.129-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41894"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-0:8.0.129-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet: .NET Framework: Local Code Execution via Protection Mechanism Failure"
},
{
"cve": "CVE-2026-50648",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-07-14T20:04:45.063188+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2500587"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in .NET Framework. An unauthorized attacker can exploit this vulnerability remotely by causing the system to allocate resources without proper limits or throttling. This uncontrolled resource allocation can lead to a Denial of Service (DoS), making the affected system unresponsive or unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: .NET Framework: Remote Denial of Service due to uncontrolled resource allocation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-0:8.0.129-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-50648"
},
{
"category": "external",
"summary": "RHBZ#2500587",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500587"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-50648",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50648"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-50648",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-50648"
},
{
"category": "external",
"summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50648",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50648"
}
],
"release_date": "2026-07-14T19:29:57.312000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T05:23:55+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-0:8.0.129-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41894"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-0:8.0.129-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet: .NET Framework: Remote Denial of Service due to uncontrolled resource allocation"
},
{
"cve": "CVE-2026-50649",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"discovery_date": "2026-07-14T20:02:12.073604+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2500563"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in .NET. This vulnerability allows an unauthorized attacker to execute code locally by exploiting a deserialization of untrusted data. This means that if an attacker can provide specially crafted data, the .NET application may process it in a way that leads to the execution of malicious code on the system where the application is running.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: .NET: Local code execution via deserialization of untrusted data",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-0:8.0.129-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-50649"
},
{
"category": "external",
"summary": "RHBZ#2500563",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500563"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-50649",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50649"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-50649",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-50649"
},
{
"category": "external",
"summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50649",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50649"
}
],
"release_date": "2026-07-14T19:29:57.970000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T05:23:55+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-0:8.0.129-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41894"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-0:8.0.129-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet: .NET: Local code execution via deserialization of untrusted data"
},
{
"cve": "CVE-2026-50650",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2026-07-14T20:01:20.750427+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2500556"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in .NET Framework. This vulnerability, caused by improper control of code generation, allows an unauthorized attacker to inject malicious code. Successful exploitation can lead to local privilege escalation, enabling the attacker to gain higher access rights on the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: .NET Framework: Privilege escalation via code injection",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-0:8.0.129-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-50650"
},
{
"category": "external",
"summary": "RHBZ#2500556",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500556"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-50650",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50650"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-50650",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-50650"
},
{
"category": "external",
"summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50650",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50650"
}
],
"release_date": "2026-07-14T19:29:58.620000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T05:23:55+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-0:8.0.129-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41894"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-0:8.0.129-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet: .NET Framework: Privilege escalation via code injection"
},
{
"cve": "CVE-2026-50651",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-07-10T20:34:51.149000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2499217"
}
],
"notes": [
{
"category": "description",
"text": ".NET Denial of Service Vulnerability - HTTP/2 SETTINGS/PING ACK flood causing OOM",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: SocketsHttpHandler Http2Connection - HTTP/2 SETTINGS/PING ACK flood causing OOM",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-0:8.0.129-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-50651"
},
{
"category": "external",
"summary": "RHBZ#2499217",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2499217"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-50651",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50651"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-50651",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-50651"
}
],
"release_date": "2026-07-14T21:37:42.263000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T05:23:55+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-0:8.0.129-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41894"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-0:8.0.129-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet: SocketsHttpHandler Http2Connection - HTTP/2 SETTINGS/PING ACK flood causing OOM"
},
{
"cve": "CVE-2026-50659",
"cwe": {
"id": "CWE-838",
"name": "Inappropriate Encoding for Output Context"
},
"discovery_date": "2026-07-14T20:04:53.048725+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2500589"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in .NET. An authorized attacker can exploit this vulnerability by leveraging improper encoding or escaping of output. This allows the attacker to perform spoofing over a network, potentially deceiving users or systems into believing they are interacting with a trusted entity.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": ".NET: .NET: Network Spoofing Vulnerability",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-0:8.0.129-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-50659"
},
{
"category": "external",
"summary": "RHBZ#2500589",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500589"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-50659",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50659"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-50659",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-50659"
},
{
"category": "external",
"summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50659",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50659"
}
],
"release_date": "2026-07-14T19:40:15.949000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T05:23:55+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-0:8.0.129-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41894"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-0:8.0.129-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": ".NET: .NET: Network Spoofing Vulnerability"
},
{
"cve": "CVE-2026-56170",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-07-14T18:06:54.194809+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2500189"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ASP.NET Core. This vulnerability allows an unauthorized remote attacker to cause a Denial of Service (DoS) by allocating resources without proper limits or throttling. This can lead to the affected system becoming unresponsive or unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ASP.NET Core: ASP.NET Core: Denial of Service via uncontrolled resource allocation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-0:8.0.129-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-56170"
},
{
"category": "external",
"summary": "RHBZ#2500189",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500189"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-56170",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56170"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56170",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56170"
},
{
"category": "external",
"summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56170",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56170"
}
],
"release_date": "2026-07-14T17:05:13.486000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T05:23:55+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-0:8.0.129-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41894"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-0:8.0.129-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ASP.NET Core: ASP.NET Core: Denial of Service via uncontrolled resource allocation"
},
{
"cve": "CVE-2026-57108",
"cwe": {
"id": "CWE-843",
"name": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)"
},
"discovery_date": "2026-07-14T18:02:49.265651+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2500109"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in .NET Core. This vulnerability, known as type confusion, allows an unauthorized remote attacker to cause a denial of service (DoS) over a network. By exploiting this flaw, an attacker can make the affected system unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: .NET Core: Denial of Service via type confusion",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-0:8.0.129-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-57108"
},
{
"category": "external",
"summary": "RHBZ#2500109",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500109"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-57108",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-57108"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-57108",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-57108"
},
{
"category": "external",
"summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57108",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57108"
}
],
"release_date": "2026-07-14T17:09:39.087000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T05:23:55+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-0:8.0.129-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41894"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-8.0-0:8.0.29-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-8.0-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-0:8.0.129-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.29-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debuginfo-0:8.0.129-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet8.0-debugsource-0:8.0.129-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet: .NET Core: Denial of Service via type confusion"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
Loading…
Loading…