{
 "version": "https://jsonfeed.org/version/1.1",
 "title": "Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2: all CVE events",
 "home_page_url": "https://patchwire.jonathanross.dev/products/microsoft--microsoft-net-framework-3-5-and-4-6-2-4-7-4-7-1-4-7-2/",
 "feed_url": "https://patchwire.jonathanross.dev/feeds/products/microsoft--microsoft-net-framework-3-5-and-4-6-2-4-7-4-7-1-4-7-2/all.json",
 "authors": [
  {
   "name": "Patchwire"
  }
 ],
 "language": "en",
 "items": [
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97801/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97801/",
   "title": "CVE-2026-97801 · Microsoft .NET Framework 3.5 · disclosed",
   "content_text": "Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to perform tampering over a network.",
   "date_published": "2026-10-13T19:01:45Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102869/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102869/",
   "title": "CVE-2026-102869 · Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 · disclosed",
   "content_text": "Access of resource using incompatible type ('type confusion') in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network.",
   "date_published": "2026-10-13T19:01:35Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-58280/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-58280/",
   "title": "CVE-2026-58280 · Microsoft .NET 10.0 runtime · disclosed",
   "content_text": "Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network.",
   "date_published": "2026-10-13T19:01:30Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-58280/fixed/almalinux-10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-58280/",
   "title": "CVE-2026-58280 · Microsoft .NET 10.0 runtime · fixed in AlmaLinux 10 (aspnetcore-runtime-10.0 10.0.13-1.el10_2 and 39 more)",
   "content_text": "Fixed versions: aspnetcore-runtime-10.0 10.0.13-1.el10_2, aspnetcore-runtime-8.0 8.0.32-1.el10_2, aspnetcore-runtime-9.0 9.0.21-1.el10_2, aspnetcore-runtime-dbg-10.0 10.0.13-1.el10_2, aspnetcore-runtime-dbg-8.0 8.0.32-1.el10_2, aspnetcore-runtime-dbg-9.0 9.0.21-1.el10_2, aspnetcore-targeting-pack-10.0 10.0.13-1.el10_2, aspnetcore-targeting-pack-8.0 8.0.32-1.el10_2, aspnetcore-targeting-pack-9.0 9.0.21-1.el10_2, dotnet-apphost-pack-10.0 10.0.13-1.el10_2, dotnet-apphost-pack-8.0 8.0.32-1.el10_2, dotnet-apphost-pack-9.0 9.0.21-1.el10_2, dotnet-host 10.0.13-1.el10_2, dotnet-hostfxr-10.0 10.0.13-1.el10_2, dotnet-hostfxr-8.0 8.0.32-1.el10_2, dotnet-hostfxr-9.0 9.0.21-1.el10_2, dotnet-runtime-10.0 10.0.13-1.el10_2, dotnet-runtime-8.0 8.0.32-1.el10_2, dotnet-runtime-9.0 9.0.21-1.el10_2, dotnet-runtime-dbg-10.0 10.0.13-1.el10_2, dotnet-runtime-dbg-8.0 8.0.32-1.el10_2, dotnet-runtime-dbg-9.0 9.0.21-1.el10_2, dotnet-sdk-10.0 10.0.113-1.el10_2, dotnet-sdk-10.0-source-built-artifacts 10.0.113-1.el10_2, dotnet-sdk-8.0 8.0.132-1.el10_2, dotnet-sdk-8.0-source-built-artifacts 8.0.132-1.el10_2, dotnet-sdk-9.0 9.0.122-1.el10_2, dotnet-sdk-9.0-source-built-artifacts 9.0.122-1.el10_2, dotnet-sdk-aot-10.0 10.0.113-1.el10_2, dotnet-sdk-aot-9.0 9.0.122-1.el10_2, dotnet-sdk-dbg-10.0 10.0.113-1.el10_2, dotnet-sdk-dbg-8.0 8.0.132-1.el10_2, dotnet-sdk-dbg-9.0 9.0.122-1.el10_2, dotnet-targeting-pack-10.0 10.0.13-1.el10_2, dotnet-targeting-pack-8.0 8.0.32-1.el10_2, dotnet-targeting-pack-9.0 9.0.21-1.el10_2, dotnet-templates-10.0 10.0.113-1.el10_2, dotnet-templates-8.0 8.0.132-1.el10_2, dotnet-templates-9.0 9.0.122-1.el10_2, netstandard-targeting-pack-2.1 9.0.122-1.el10_2.",
   "date_published": "2026-10-13T19:01:30Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-58280/fixed/almalinux-8",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-58280/",
   "title": "CVE-2026-58280 · Microsoft .NET 10.0 runtime · fixed in AlmaLinux 8 (aspnetcore-runtime-10.0 10.0.13-1.el8_10 and 39 more)",
   "content_text": "Fixed versions: aspnetcore-runtime-10.0 10.0.13-1.el8_10, aspnetcore-runtime-8.0 8.0.32-2.el8_10, aspnetcore-runtime-9.0 9.0.21-1.el8_10, aspnetcore-runtime-dbg-10.0 10.0.13-1.el8_10, aspnetcore-runtime-dbg-8.0 8.0.32-2.el8_10, aspnetcore-runtime-dbg-9.0 9.0.21-1.el8_10, aspnetcore-targeting-pack-10.0 10.0.13-1.el8_10, aspnetcore-targeting-pack-8.0 8.0.32-2.el8_10, aspnetcore-targeting-pack-9.0 9.0.21-1.el8_10, dotnet 10.0.113-1.el8_10, dotnet-apphost-pack-10.0 10.0.13-1.el8_10, dotnet-apphost-pack-8.0 8.0.32-2.el8_10, dotnet-apphost-pack-9.0 9.0.21-1.el8_10, dotnet-hostfxr-10.0 10.0.13-1.el8_10, dotnet-hostfxr-8.0 8.0.32-2.el8_10, dotnet-hostfxr-9.0 9.0.21-1.el8_10, dotnet-runtime-10.0 10.0.13-1.el8_10, dotnet-runtime-8.0 8.0.32-2.el8_10, dotnet-runtime-9.0 9.0.21-1.el8_10, dotnet-runtime-dbg-10.0 10.0.13-1.el8_10, dotnet-runtime-dbg-8.0 8.0.32-2.el8_10, dotnet-runtime-dbg-9.0 9.0.21-1.el8_10, dotnet-sdk-10.0 10.0.113-1.el8_10, dotnet-sdk-10.0-source-built-artifacts 10.0.113-1.el8_10, dotnet-sdk-8.0 8.0.132-2.el8_10, dotnet-sdk-8.0-source-built-artifacts 8.0.132-2.el8_10, dotnet-sdk-9.0 9.0.122-1.el8_10, dotnet-sdk-9.0-source-built-artifacts 9.0.122-1.el8_10, dotnet-sdk-aot-10.0 10.0.113-1.el8_10, dotnet-sdk-aot-9.0 9.0.122-1.el8_10, dotnet-sdk-dbg-10.0 10.0.113-1.el8_10, dotnet-sdk-dbg-8.0 8.0.132-2.el8_10, dotnet-sdk-dbg-9.0 9.0.122-1.el8_10, dotnet-targeting-pack-10.0 10.0.13-1.el8_10, dotnet-targeting-pack-8.0 8.0.32-2.el8_10, dotnet-targeting-pack-9.0 9.0.21-1.el8_10, dotnet-templates-10.0 10.0.113-1.el8_10, dotnet-templates-8.0 8.0.132-2.el8_10, dotnet-templates-9.0 9.0.122-1.el8_10, netstandard-targeting-pack-2.1 9.0.122-1.el8_10.",
   "date_published": "2026-10-13T19:01:30Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-58280/fixed/almalinux-9",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-58280/",
   "title": "CVE-2026-58280 · Microsoft .NET 10.0 runtime · fixed in AlmaLinux 9 (aspnetcore-runtime-10.0 10.0.13-1.el9_8 and 39 more)",
   "content_text": "Fixed versions: aspnetcore-runtime-10.0 10.0.13-1.el9_8, aspnetcore-runtime-8.0 8.0.32-1.el9_8, aspnetcore-runtime-9.0 9.0.21-1.el9_8, aspnetcore-runtime-dbg-10.0 10.0.13-1.el9_8, aspnetcore-runtime-dbg-8.0 8.0.32-1.el9_8, aspnetcore-runtime-dbg-9.0 9.0.21-1.el9_8, aspnetcore-targeting-pack-10.0 10.0.13-1.el9_8, aspnetcore-targeting-pack-8.0 8.0.32-1.el9_8, aspnetcore-targeting-pack-9.0 9.0.21-1.el9_8, dotnet-apphost-pack-10.0 10.0.13-1.el9_8, dotnet-apphost-pack-8.0 8.0.32-1.el9_8, dotnet-apphost-pack-9.0 9.0.21-1.el9_8, dotnet-host 10.0.13-1.el9_8, dotnet-hostfxr-10.0 10.0.13-1.el9_8, dotnet-hostfxr-8.0 8.0.32-1.el9_8, dotnet-hostfxr-9.0 9.0.21-1.el9_8, dotnet-runtime-10.0 10.0.13-1.el9_8, dotnet-runtime-8.0 8.0.32-1.el9_8, dotnet-runtime-9.0 9.0.21-1.el9_8, dotnet-runtime-dbg-10.0 10.0.13-1.el9_8, dotnet-runtime-dbg-8.0 8.0.32-1.el9_8, dotnet-runtime-dbg-9.0 9.0.21-1.el9_8, dotnet-sdk-10.0 10.0.113-1.el9_8, dotnet-sdk-10.0-source-built-artifacts 10.0.113-1.el9_8, dotnet-sdk-8.0 8.0.132-1.el9_8, dotnet-sdk-8.0-source-built-artifacts 8.0.132-1.el9_8, dotnet-sdk-9.0 9.0.122-1.el9_8, dotnet-sdk-9.0-source-built-artifacts 9.0.122-1.el9_8, dotnet-sdk-aot-10.0 10.0.113-1.el9_8, dotnet-sdk-aot-9.0 9.0.122-1.el9_8, dotnet-sdk-dbg-10.0 10.0.113-1.el9_8, dotnet-sdk-dbg-8.0 8.0.132-1.el9_8, dotnet-sdk-dbg-9.0 9.0.122-1.el9_8, dotnet-targeting-pack-10.0 10.0.13-1.el9_8, dotnet-targeting-pack-8.0 8.0.32-1.el9_8, dotnet-targeting-pack-9.0 9.0.21-1.el9_8, dotnet-templates-10.0 10.0.113-1.el9_8, dotnet-templates-8.0 8.0.132-1.el9_8, dotnet-templates-9.0 9.0.122-1.el9_8, netstandard-targeting-pack-2.1 9.0.122-1.el9_8.",
   "date_published": "2026-10-13T19:01:30Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-58280/fixed/nuget",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-58280/",
   "title": "CVE-2026-58280 · Microsoft .NET 10.0 runtime · fixed upstream (NuGet)",
   "content_text": "Fixed versions: Microsoft.NETCore.App.Runtime.linux-arm 10.0.13, Microsoft.NETCore.App.Runtime.linux-arm 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.linux-arm 8.0.32, Microsoft.NETCore.App.Runtime.linux-arm 9.0.21, Microsoft.NETCore.App.Runtime.linux-arm64 10.0.13, Microsoft.NETCore.App.Runtime.linux-arm64 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.linux-arm64 8.0.32, Microsoft.NETCore.App.Runtime.linux-arm64 9.0.21, Microsoft.NETCore.App.Runtime.linux-musl-arm 10.0.13, Microsoft.NETCore.App.Runtime.linux-musl-arm 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.linux-musl-arm 8.0.32, Microsoft.NETCore.App.Runtime.linux-musl-arm 9.0.21, Microsoft.NETCore.App.Runtime.linux-musl-arm64 10.0.13, Microsoft.NETCore.App.Runtime.linux-musl-arm64 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.linux-musl-arm64 8.0.32, Microsoft.NETCore.App.Runtime.linux-musl-arm64 9.0.21, Microsoft.NETCore.App.Runtime.linux-musl-x64 10.0.13, Microsoft.NETCore.App.Runtime.linux-musl-x64 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.linux-musl-x64 8.0.32, Microsoft.NETCore.App.Runtime.linux-musl-x64 9.0.21, Microsoft.NETCore.App.Runtime.linux-x64 10.0.13, Microsoft.NETCore.App.Runtime.linux-x64 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.linux-x64 8.0.32, Microsoft.NETCore.App.Runtime.linux-x64 9.0.21, Microsoft.NETCore.App.Runtime.osx-arm64 10.0.13, Microsoft.NETCore.App.Runtime.osx-arm64 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.osx-arm64 8.0.32, Microsoft.NETCore.App.Runtime.osx-arm64 9.0.21, Microsoft.NETCore.App.Runtime.osx-x64 10.0.13, Microsoft.NETCore.App.Runtime.osx-x64 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.osx-x64 8.0.32, Microsoft.NETCore.App.Runtime.osx-x64 9.0.21, Microsoft.NETCore.App.Runtime.win-arm 10.0.13, Microsoft.NETCore.App.Runtime.win-arm 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.win-arm 8.0.32, Microsoft.NETCore.App.Runtime.win-arm 9.0.21, Microsoft.NETCore.App.Runtime.win-arm64 10.0.13, Microsoft.NETCore.App.Runtime.win-arm64 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.win-arm64 8.0.32, Microsoft.NETCore.App.Runtime.win-arm64 9.0.21, Microsoft.NETCore.App.Runtime.win-x64 10.0.13, Microsoft.NETCore.App.Runtime.win-x64 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.win-x64 8.0.32, Microsoft.NETCore.App.Runtime.win-x64 9.0.21, Microsoft.NETCore.App.Runtime.win-x86 10.0.13, Microsoft.NETCore.App.Runtime.win-x86 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.win-x86 8.0.32, Microsoft.NETCore.App.Runtime.win-x86 9.0.21.",
   "date_published": "2026-10-13T19:01:30Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-58280/fixed/red-hat-hummingbird-1",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-58280/",
   "title": "CVE-2026-58280 · Microsoft .NET 10.0 runtime · fixed in Red Hat hummingbird 1 (aspnetcore-runtime-8.0 0:8.0.32-0.1.hum1 and 33 more)",
   "content_text": "Fixed versions: aspnetcore-runtime-8.0 0:8.0.32-0.1.hum1, aspnetcore-runtime-9.0 0:9.0.21-0.1.hum1, aspnetcore-runtime-dbg-8.0 0:8.0.32-0.1.hum1, aspnetcore-runtime-dbg-9.0 0:9.0.21-0.1.hum1, aspnetcore-targeting-pack-8.0 0:8.0.32-0.1.hum1, aspnetcore-targeting-pack-9.0 0:9.0.21-0.1.hum1, dotnet-apphost-pack-8.0 0:8.0.32-0.1.hum1, dotnet-apphost-pack-9.0 0:9.0.21-0.1.hum1, dotnet-hostfxr-8.0 0:8.0.32-0.1.hum1, dotnet-hostfxr-9.0 0:9.0.21-0.1.hum1, dotnet-runtime-8.0 0:8.0.32-0.1.hum1, dotnet-runtime-9.0 0:9.0.21-0.1.hum1, dotnet-runtime-dbg-8.0 0:8.0.32-0.1.hum1, dotnet-runtime-dbg-9.0 0:9.0.21-0.1.hum1, dotnet-sdk-10.0 0:10.0.113-1.hum1, dotnet-sdk-10.0-source-built-artifacts 0:10.0.113-1.hum1, dotnet-sdk-8.0 0:8.0.132-0.1.hum1, dotnet-sdk-8.0-source-built-artifacts 0:8.0.132-0.1.hum1, dotnet-sdk-9.0 0:9.0.122-0.1.hum1, dotnet-sdk-9.0-source-built-artifacts 0:9.0.122-0.1.hum1, dotnet-sdk-aot-10.0 0:10.0.113-1.hum1, dotnet-sdk-aot-9.0 0:9.0.122-0.1.hum1, dotnet-sdk-dbg-10.0 0:10.0.113-1.hum1, dotnet-sdk-dbg-8.0 0:8.0.132-0.1.hum1, dotnet-sdk-dbg-9.0 0:9.0.122-0.1.hum1, dotnet-targeting-pack-8.0 0:8.0.32-0.1.hum1, dotnet-targeting-pack-9.0 0:9.0.21-0.1.hum1, dotnet-templates-10.0 0:10.0.113-1.hum1, dotnet-templates-8.0 0:8.0.132-0.1.hum1, dotnet-templates-9.0 0:9.0.122-0.1.hum1, dotnet10.0 0:10.0.113-1.hum1, dotnet8.0 0:8.0.132-0.1.hum1, dotnet9.0 0:9.0.122-0.1.hum1, netstandard-targeting-pack-2.1 0:9.0.122-0.1.hum1.",
   "date_published": "2026-10-13T19:01:30Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-58280/fixed/rocky-linux-10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-58280/",
   "title": "CVE-2026-58280 · Microsoft .NET 10.0 runtime · fixed in Rocky Linux 10 (dotnet10.0 0:10.0.113-1.el10_2 and 2 more)",
   "content_text": "Fixed versions: dotnet10.0 0:10.0.113-1.el10_2, dotnet8.0 0:8.0.132-1.el10_2, dotnet9.0 0:9.0.122-1.el10_2.",
   "date_published": "2026-10-13T19:01:30Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-58280/fixed/rocky-linux-8",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-58280/",
   "title": "CVE-2026-58280 · Microsoft .NET 10.0 runtime · fixed in Rocky Linux 8 (dotnet10.0 0:10.0.113-1.el8_10 and 2 more)",
   "content_text": "Fixed versions: dotnet10.0 0:10.0.113-1.el8_10, dotnet8.0 0:8.0.132-2.el8_10, dotnet9.0 0:9.0.122-1.el8_10.",
   "date_published": "2026-10-13T19:01:30Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-58280/fixed/rocky-linux-9",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-58280/",
   "title": "CVE-2026-58280 · Microsoft .NET 10.0 runtime · fixed in Rocky Linux 9 (dotnet10.0 0:10.0.113-1.el9_8 and 2 more)",
   "content_text": "Fixed versions: dotnet10.0 0:10.0.113-1.el9_8, dotnet8.0 0:8.0.132-1.el9_8, dotnet9.0 0:9.0.122-1.el9_8.",
   "date_published": "2026-10-13T19:01:30Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-58280/fixed/ubuntu-22.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-58280/",
   "title": "CVE-2026-58280 · Microsoft .NET 10.0 runtime · fixed in Ubuntu 22.04 LTS (dotnet8 8.0.132-8.0.32-0ubuntu1~22.04.1)",
   "content_text": "Fixed versions: dotnet8 8.0.132-8.0.32-0ubuntu1~22.04.1.",
   "date_published": "2026-10-13T19:01:30Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-58280/fixed/ubuntu-24.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-58280/",
   "title": "CVE-2026-58280 · Microsoft .NET 10.0 runtime · fixed in Ubuntu 24.04 LTS (dotnet10 10.0.113-10.0.13-0ubuntu1~24.04.1 and 1 more)",
   "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~24.04.1, dotnet8 8.0.132-8.0.32-0ubuntu1~24.04.1.",
   "date_published": "2026-10-13T19:01:30Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-58280/fixed/ubuntu-26.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-58280/",
   "title": "CVE-2026-58280 · Microsoft .NET 10.0 runtime · fixed in Ubuntu 26.04 LTS (dotnet10 10.0.113-10.0.13-0ubuntu1~26.04.1)",
   "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~26.04.1.",
   "date_published": "2026-10-13T19:01:30Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-58280/fixed/ubuntu-26.10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-58280/",
   "title": "CVE-2026-58280 · Microsoft .NET 10.0 runtime · fixed in Ubuntu 26.10 (dotnet10 10.0.113-10.0.13-0ubuntu1~26.10.1 and 1 more)",
   "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~26.10.1, dotnet11 11.0.100-11.0.0~rc2-0ubuntu1~26.10.1.",
   "date_published": "2026-10-13T19:01:30Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97788/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97788/",
   "title": "CVE-2026-97788 · Microsoft .NET Framework 3.5 · disclosed",
   "content_text": "Observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attacker to disclose information over a network.",
   "date_published": "2026-10-13T19:01:29Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96960/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96960/",
   "title": "CVE-2026-96960 · Microsoft .NET Framework 3.5 · disclosed",
   "content_text": "Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network.",
   "date_published": "2026-10-13T19:01:27Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96960/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96960/",
   "title": "CVE-2026-96960 · Microsoft .NET Framework 3.5 · fixed in Chainguard (aspnet-9-targeting-pack 9.0.122-r0 and 8 more)",
   "content_text": "Fixed versions: aspnet-9-targeting-pack 9.0.122-r0, dotnet-10-sdk 10.0.113-r1, dotnet-8-sdk 8.0.132-r0, dotnet-9-sdk 9.0.122-r0, dotnet-sdk-10.0.2 10.0.204-r9, dotnet-sdk-10.0.3 10.0.303-r7, dotnet-sdk-10.0.4 10.0.402-r0, dotnet-sdk-stage0-10 10.0.113-r0, promitor 2.16.1-r1.",
   "date_published": "2026-10-13T19:01:27Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96960/fixed/nuget",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96960/",
   "title": "CVE-2026-96960 · Microsoft .NET Framework 3.5 · fixed upstream (NuGet)",
   "content_text": "Fixed versions: System.Security.Cryptography.Xml 10.0.13, System.Security.Cryptography.Xml 11.0.0-rc.2, System.Security.Cryptography.Xml 8.0.5, System.Security.Cryptography.Xml 9.0.21.",
   "date_published": "2026-10-13T19:01:27Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96960/fixed/ubuntu-22.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96960/",
   "title": "CVE-2026-96960 · Microsoft .NET Framework 3.5 · fixed in Ubuntu 22.04 LTS (dotnet8 8.0.132-8.0.32-0ubuntu1~22.04.1)",
   "content_text": "Fixed versions: dotnet8 8.0.132-8.0.32-0ubuntu1~22.04.1.",
   "date_published": "2026-10-13T19:01:27Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96960/fixed/ubuntu-24.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96960/",
   "title": "CVE-2026-96960 · Microsoft .NET Framework 3.5 · fixed in Ubuntu 24.04 LTS (dotnet10 10.0.113-10.0.13-0ubuntu1~24.04.1 and 1 more)",
   "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~24.04.1, dotnet8 8.0.132-8.0.32-0ubuntu1~24.04.1.",
   "date_published": "2026-10-13T19:01:27Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96960/fixed/ubuntu-26.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96960/",
   "title": "CVE-2026-96960 · Microsoft .NET Framework 3.5 · fixed in Ubuntu 26.04 LTS (dotnet10 10.0.113-10.0.13-0ubuntu1~26.04.1)",
   "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~26.04.1.",
   "date_published": "2026-10-13T19:01:27Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96960/fixed/ubuntu-26.10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96960/",
   "title": "CVE-2026-96960 · Microsoft .NET Framework 3.5 · fixed in Ubuntu 26.10 (dotnet10 10.0.113-10.0.13-0ubuntu1~26.10.1 and 1 more)",
   "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~26.10.1, dotnet11 11.0.100-11.0.0~rc2-0ubuntu1~26.10.1.",
   "date_published": "2026-10-13T19:01:27Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96960/fixed/wolfi",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96960/",
   "title": "CVE-2026-96960 · Microsoft .NET Framework 3.5 · fixed in Wolfi (aspnet-9-targeting-pack 9.0.122-r0 and 8 more)",
   "content_text": "Fixed versions: aspnet-9-targeting-pack 9.0.122-r0, dotnet-10-sdk 10.0.113-r1, dotnet-8-sdk 8.0.132-r0, dotnet-9-sdk 9.0.122-r0, dotnet-sdk-10.0.2 10.0.204-r9, dotnet-sdk-10.0.3 10.0.303-r7, dotnet-sdk-10.0.4 10.0.402-r0, dotnet-sdk-stage0-10 10.0.113-r0, promitor 2.16.1-r1.",
   "date_published": "2026-10-13T19:01:27Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96959/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96959/",
   "title": "CVE-2026-96959 · Microsoft .NET Framework 3.5 · disclosed",
   "content_text": "Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.",
   "date_published": "2026-10-13T19:01:27Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96959/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96959/",
   "title": "CVE-2026-96959 · Microsoft .NET Framework 3.5 · fixed in Chainguard (aspnet-9-targeting-pack 9.0.122-r0 and 8 more)",
   "content_text": "Fixed versions: aspnet-9-targeting-pack 9.0.122-r0, dotnet-10-sdk 10.0.113-r1, dotnet-8-sdk 8.0.132-r0, dotnet-9-sdk 9.0.122-r0, dotnet-sdk-10.0.2 10.0.204-r9, dotnet-sdk-10.0.3 10.0.303-r7, dotnet-sdk-10.0.4 10.0.402-r0, dotnet-sdk-stage0-10 10.0.113-r0, promitor 2.16.1-r1.",
   "date_published": "2026-10-13T19:01:27Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96959/fixed/nuget",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96959/",
   "title": "CVE-2026-96959 · Microsoft .NET Framework 3.5 · fixed upstream (NuGet)",
   "content_text": "Fixed versions: System.Security.Cryptography.Xml 10.0.13, System.Security.Cryptography.Xml 11.0.0-rc.2, System.Security.Cryptography.Xml 8.0.5, System.Security.Cryptography.Xml 9.0.21.",
   "date_published": "2026-10-13T19:01:27Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96959/fixed/ubuntu-22.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96959/",
   "title": "CVE-2026-96959 · Microsoft .NET Framework 3.5 · fixed in Ubuntu 22.04 LTS (dotnet8 8.0.132-8.0.32-0ubuntu1~22.04.1)",
   "content_text": "Fixed versions: dotnet8 8.0.132-8.0.32-0ubuntu1~22.04.1.",
   "date_published": "2026-10-13T19:01:27Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96959/fixed/ubuntu-24.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96959/",
   "title": "CVE-2026-96959 · Microsoft .NET Framework 3.5 · fixed in Ubuntu 24.04 LTS (dotnet10 10.0.113-10.0.13-0ubuntu1~24.04.1 and 1 more)",
   "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~24.04.1, dotnet8 8.0.132-8.0.32-0ubuntu1~24.04.1.",
   "date_published": "2026-10-13T19:01:27Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96959/fixed/ubuntu-26.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96959/",
   "title": "CVE-2026-96959 · Microsoft .NET Framework 3.5 · fixed in Ubuntu 26.04 LTS (dotnet10 10.0.113-10.0.13-0ubuntu1~26.04.1)",
   "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~26.04.1.",
   "date_published": "2026-10-13T19:01:27Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96959/fixed/ubuntu-26.10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96959/",
   "title": "CVE-2026-96959 · Microsoft .NET Framework 3.5 · fixed in Ubuntu 26.10 (dotnet10 10.0.113-10.0.13-0ubuntu1~26.10.1 and 1 more)",
   "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~26.10.1, dotnet11 11.0.100-11.0.0~rc2-0ubuntu1~26.10.1.",
   "date_published": "2026-10-13T19:01:27Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96959/fixed/wolfi",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96959/",
   "title": "CVE-2026-96959 · Microsoft .NET Framework 3.5 · fixed in Wolfi (aspnet-9-targeting-pack 9.0.122-r0 and 8 more)",
   "content_text": "Fixed versions: aspnet-9-targeting-pack 9.0.122-r0, dotnet-10-sdk 10.0.113-r1, dotnet-8-sdk 8.0.132-r0, dotnet-9-sdk 9.0.122-r0, dotnet-sdk-10.0.2 10.0.204-r9, dotnet-sdk-10.0.3 10.0.303-r7, dotnet-sdk-10.0.4 10.0.402-r0, dotnet-sdk-stage0-10 10.0.113-r0, promitor 2.16.1-r1.",
   "date_published": "2026-10-13T19:01:27Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96958/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96958/",
   "title": "CVE-2026-96958 · Microsoft .NET Framework 3.5 · disclosed",
   "content_text": "Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.",
   "date_published": "2026-10-13T19:01:27Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96958/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96958/",
   "title": "CVE-2026-96958 · Microsoft .NET Framework 3.5 · fixed in Chainguard (aspnet-9-targeting-pack 9.0.122-r0 and 8 more)",
   "content_text": "Fixed versions: aspnet-9-targeting-pack 9.0.122-r0, dotnet-10-sdk 10.0.113-r1, dotnet-8-sdk 8.0.132-r0, dotnet-9-sdk 9.0.122-r0, dotnet-sdk-10.0.2 10.0.204-r9, dotnet-sdk-10.0.3 10.0.303-r7, dotnet-sdk-10.0.4 10.0.402-r0, dotnet-sdk-stage0-10 10.0.113-r0, promitor 2.16.1-r1.",
   "date_published": "2026-10-13T19:01:27Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96958/fixed/nuget",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96958/",
   "title": "CVE-2026-96958 · Microsoft .NET Framework 3.5 · fixed upstream (NuGet)",
   "content_text": "Fixed versions: System.Security.Cryptography.Xml 10.0.13, System.Security.Cryptography.Xml 11.0.0-rc.2, System.Security.Cryptography.Xml 8.0.5, System.Security.Cryptography.Xml 9.0.21.",
   "date_published": "2026-10-13T19:01:27Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96958/fixed/ubuntu-22.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96958/",
   "title": "CVE-2026-96958 · Microsoft .NET Framework 3.5 · fixed in Ubuntu 22.04 LTS (dotnet8 8.0.132-8.0.32-0ubuntu1~22.04.1)",
   "content_text": "Fixed versions: dotnet8 8.0.132-8.0.32-0ubuntu1~22.04.1.",
   "date_published": "2026-10-13T19:01:27Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96958/fixed/ubuntu-24.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96958/",
   "title": "CVE-2026-96958 · Microsoft .NET Framework 3.5 · fixed in Ubuntu 24.04 LTS (dotnet10 10.0.113-10.0.13-0ubuntu1~24.04.1 and 1 more)",
   "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~24.04.1, dotnet8 8.0.132-8.0.32-0ubuntu1~24.04.1.",
   "date_published": "2026-10-13T19:01:27Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96958/fixed/ubuntu-26.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96958/",
   "title": "CVE-2026-96958 · Microsoft .NET Framework 3.5 · fixed in Ubuntu 26.04 LTS (dotnet10 10.0.113-10.0.13-0ubuntu1~26.04.1)",
   "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~26.04.1.",
   "date_published": "2026-10-13T19:01:27Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96958/fixed/ubuntu-26.10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96958/",
   "title": "CVE-2026-96958 · Microsoft .NET Framework 3.5 · fixed in Ubuntu 26.10 (dotnet10 10.0.113-10.0.13-0ubuntu1~26.10.1 and 1 more)",
   "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~26.10.1, dotnet11 11.0.100-11.0.0~rc2-0ubuntu1~26.10.1.",
   "date_published": "2026-10-13T19:01:27Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96958/fixed/wolfi",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96958/",
   "title": "CVE-2026-96958 · Microsoft .NET Framework 3.5 · fixed in Wolfi (aspnet-9-targeting-pack 9.0.122-r0 and 8 more)",
   "content_text": "Fixed versions: aspnet-9-targeting-pack 9.0.122-r0, dotnet-10-sdk 10.0.113-r1, dotnet-8-sdk 8.0.132-r0, dotnet-9-sdk 9.0.122-r0, dotnet-sdk-10.0.2 10.0.204-r9, dotnet-sdk-10.0.3 10.0.303-r7, dotnet-sdk-10.0.4 10.0.402-r0, dotnet-sdk-stage0-10 10.0.113-r0, promitor 2.16.1-r1.",
   "date_published": "2026-10-13T19:01:27Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96233/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96233/",
   "title": "CVE-2026-96233 · Microsoft .NET 10.0 runtime · disclosed",
   "content_text": "Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network.",
   "date_published": "2026-10-13T19:01:16Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96233/fixed/almalinux-10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96233/",
   "title": "CVE-2026-96233 · Microsoft .NET 10.0 runtime · fixed in AlmaLinux 10 (aspnetcore-runtime-10.0 10.0.13-1.el10_2 and 39 more)",
   "content_text": "Fixed versions: aspnetcore-runtime-10.0 10.0.13-1.el10_2, aspnetcore-runtime-8.0 8.0.32-1.el10_2, aspnetcore-runtime-9.0 9.0.21-1.el10_2, aspnetcore-runtime-dbg-10.0 10.0.13-1.el10_2, aspnetcore-runtime-dbg-8.0 8.0.32-1.el10_2, aspnetcore-runtime-dbg-9.0 9.0.21-1.el10_2, aspnetcore-targeting-pack-10.0 10.0.13-1.el10_2, aspnetcore-targeting-pack-8.0 8.0.32-1.el10_2, aspnetcore-targeting-pack-9.0 9.0.21-1.el10_2, dotnet-apphost-pack-10.0 10.0.13-1.el10_2, dotnet-apphost-pack-8.0 8.0.32-1.el10_2, dotnet-apphost-pack-9.0 9.0.21-1.el10_2, dotnet-host 10.0.13-1.el10_2, dotnet-hostfxr-10.0 10.0.13-1.el10_2, dotnet-hostfxr-8.0 8.0.32-1.el10_2, dotnet-hostfxr-9.0 9.0.21-1.el10_2, dotnet-runtime-10.0 10.0.13-1.el10_2, dotnet-runtime-8.0 8.0.32-1.el10_2, dotnet-runtime-9.0 9.0.21-1.el10_2, dotnet-runtime-dbg-10.0 10.0.13-1.el10_2, dotnet-runtime-dbg-8.0 8.0.32-1.el10_2, dotnet-runtime-dbg-9.0 9.0.21-1.el10_2, dotnet-sdk-10.0 10.0.113-1.el10_2, dotnet-sdk-10.0-source-built-artifacts 10.0.113-1.el10_2, dotnet-sdk-8.0 8.0.132-1.el10_2, dotnet-sdk-8.0-source-built-artifacts 8.0.132-1.el10_2, dotnet-sdk-9.0 9.0.122-1.el10_2, dotnet-sdk-9.0-source-built-artifacts 9.0.122-1.el10_2, dotnet-sdk-aot-10.0 10.0.113-1.el10_2, dotnet-sdk-aot-9.0 9.0.122-1.el10_2, dotnet-sdk-dbg-10.0 10.0.113-1.el10_2, dotnet-sdk-dbg-8.0 8.0.132-1.el10_2, dotnet-sdk-dbg-9.0 9.0.122-1.el10_2, dotnet-targeting-pack-10.0 10.0.13-1.el10_2, dotnet-targeting-pack-8.0 8.0.32-1.el10_2, dotnet-targeting-pack-9.0 9.0.21-1.el10_2, dotnet-templates-10.0 10.0.113-1.el10_2, dotnet-templates-8.0 8.0.132-1.el10_2, dotnet-templates-9.0 9.0.122-1.el10_2, netstandard-targeting-pack-2.1 9.0.122-1.el10_2.",
   "date_published": "2026-10-13T19:01:16Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96233/fixed/almalinux-8",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96233/",
   "title": "CVE-2026-96233 · Microsoft .NET 10.0 runtime · fixed in AlmaLinux 8 (aspnetcore-runtime-10.0 10.0.13-1.el8_10 and 39 more)",
   "content_text": "Fixed versions: aspnetcore-runtime-10.0 10.0.13-1.el8_10, aspnetcore-runtime-8.0 8.0.32-2.el8_10, aspnetcore-runtime-9.0 9.0.21-1.el8_10, aspnetcore-runtime-dbg-10.0 10.0.13-1.el8_10, aspnetcore-runtime-dbg-8.0 8.0.32-2.el8_10, aspnetcore-runtime-dbg-9.0 9.0.21-1.el8_10, aspnetcore-targeting-pack-10.0 10.0.13-1.el8_10, aspnetcore-targeting-pack-8.0 8.0.32-2.el8_10, aspnetcore-targeting-pack-9.0 9.0.21-1.el8_10, dotnet 10.0.113-1.el8_10, dotnet-apphost-pack-10.0 10.0.13-1.el8_10, dotnet-apphost-pack-8.0 8.0.32-2.el8_10, dotnet-apphost-pack-9.0 9.0.21-1.el8_10, dotnet-hostfxr-10.0 10.0.13-1.el8_10, dotnet-hostfxr-8.0 8.0.32-2.el8_10, dotnet-hostfxr-9.0 9.0.21-1.el8_10, dotnet-runtime-10.0 10.0.13-1.el8_10, dotnet-runtime-8.0 8.0.32-2.el8_10, dotnet-runtime-9.0 9.0.21-1.el8_10, dotnet-runtime-dbg-10.0 10.0.13-1.el8_10, dotnet-runtime-dbg-8.0 8.0.32-2.el8_10, dotnet-runtime-dbg-9.0 9.0.21-1.el8_10, dotnet-sdk-10.0 10.0.113-1.el8_10, dotnet-sdk-10.0-source-built-artifacts 10.0.113-1.el8_10, dotnet-sdk-8.0 8.0.132-2.el8_10, dotnet-sdk-8.0-source-built-artifacts 8.0.132-2.el8_10, dotnet-sdk-9.0 9.0.122-1.el8_10, dotnet-sdk-9.0-source-built-artifacts 9.0.122-1.el8_10, dotnet-sdk-aot-10.0 10.0.113-1.el8_10, dotnet-sdk-aot-9.0 9.0.122-1.el8_10, dotnet-sdk-dbg-10.0 10.0.113-1.el8_10, dotnet-sdk-dbg-8.0 8.0.132-2.el8_10, dotnet-sdk-dbg-9.0 9.0.122-1.el8_10, dotnet-targeting-pack-10.0 10.0.13-1.el8_10, dotnet-targeting-pack-8.0 8.0.32-2.el8_10, dotnet-targeting-pack-9.0 9.0.21-1.el8_10, dotnet-templates-10.0 10.0.113-1.el8_10, dotnet-templates-8.0 8.0.132-2.el8_10, dotnet-templates-9.0 9.0.122-1.el8_10, netstandard-targeting-pack-2.1 9.0.122-1.el8_10.",
   "date_published": "2026-10-13T19:01:16Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96233/fixed/almalinux-9",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96233/",
   "title": "CVE-2026-96233 · Microsoft .NET 10.0 runtime · fixed in AlmaLinux 9 (aspnetcore-runtime-10.0 10.0.13-1.el9_8 and 39 more)",
   "content_text": "Fixed versions: aspnetcore-runtime-10.0 10.0.13-1.el9_8, aspnetcore-runtime-8.0 8.0.32-1.el9_8, aspnetcore-runtime-9.0 9.0.21-1.el9_8, aspnetcore-runtime-dbg-10.0 10.0.13-1.el9_8, aspnetcore-runtime-dbg-8.0 8.0.32-1.el9_8, aspnetcore-runtime-dbg-9.0 9.0.21-1.el9_8, aspnetcore-targeting-pack-10.0 10.0.13-1.el9_8, aspnetcore-targeting-pack-8.0 8.0.32-1.el9_8, aspnetcore-targeting-pack-9.0 9.0.21-1.el9_8, dotnet-apphost-pack-10.0 10.0.13-1.el9_8, dotnet-apphost-pack-8.0 8.0.32-1.el9_8, dotnet-apphost-pack-9.0 9.0.21-1.el9_8, dotnet-host 10.0.13-1.el9_8, dotnet-hostfxr-10.0 10.0.13-1.el9_8, dotnet-hostfxr-8.0 8.0.32-1.el9_8, dotnet-hostfxr-9.0 9.0.21-1.el9_8, dotnet-runtime-10.0 10.0.13-1.el9_8, dotnet-runtime-8.0 8.0.32-1.el9_8, dotnet-runtime-9.0 9.0.21-1.el9_8, dotnet-runtime-dbg-10.0 10.0.13-1.el9_8, dotnet-runtime-dbg-8.0 8.0.32-1.el9_8, dotnet-runtime-dbg-9.0 9.0.21-1.el9_8, dotnet-sdk-10.0 10.0.113-1.el9_8, dotnet-sdk-10.0-source-built-artifacts 10.0.113-1.el9_8, dotnet-sdk-8.0 8.0.132-1.el9_8, dotnet-sdk-8.0-source-built-artifacts 8.0.132-1.el9_8, dotnet-sdk-9.0 9.0.122-1.el9_8, dotnet-sdk-9.0-source-built-artifacts 9.0.122-1.el9_8, dotnet-sdk-aot-10.0 10.0.113-1.el9_8, dotnet-sdk-aot-9.0 9.0.122-1.el9_8, dotnet-sdk-dbg-10.0 10.0.113-1.el9_8, dotnet-sdk-dbg-8.0 8.0.132-1.el9_8, dotnet-sdk-dbg-9.0 9.0.122-1.el9_8, dotnet-targeting-pack-10.0 10.0.13-1.el9_8, dotnet-targeting-pack-8.0 8.0.32-1.el9_8, dotnet-targeting-pack-9.0 9.0.21-1.el9_8, dotnet-templates-10.0 10.0.113-1.el9_8, dotnet-templates-8.0 8.0.132-1.el9_8, dotnet-templates-9.0 9.0.122-1.el9_8, netstandard-targeting-pack-2.1 9.0.122-1.el9_8.",
   "date_published": "2026-10-13T19:01:16Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96233/fixed/nuget",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96233/",
   "title": "CVE-2026-96233 · Microsoft .NET 10.0 runtime · fixed upstream (NuGet)",
   "content_text": "Fixed versions: Microsoft.NETCore.App.Runtime.linux-arm 10.0.13, Microsoft.NETCore.App.Runtime.linux-arm 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.linux-arm 8.0.32, Microsoft.NETCore.App.Runtime.linux-arm 9.0.21, Microsoft.NETCore.App.Runtime.linux-arm64 10.0.13, Microsoft.NETCore.App.Runtime.linux-arm64 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.linux-arm64 8.0.32, Microsoft.NETCore.App.Runtime.linux-arm64 9.0.21, Microsoft.NETCore.App.Runtime.linux-musl-arm 10.0.13, Microsoft.NETCore.App.Runtime.linux-musl-arm 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.linux-musl-arm 8.0.32, Microsoft.NETCore.App.Runtime.linux-musl-arm 9.0.21, Microsoft.NETCore.App.Runtime.linux-musl-arm64 10.0.13, Microsoft.NETCore.App.Runtime.linux-musl-arm64 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.linux-musl-arm64 8.0.32, Microsoft.NETCore.App.Runtime.linux-musl-arm64 9.0.21, Microsoft.NETCore.App.Runtime.linux-musl-x64 10.0.13, Microsoft.NETCore.App.Runtime.linux-musl-x64 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.linux-musl-x64 8.0.32, Microsoft.NETCore.App.Runtime.linux-musl-x64 9.0.21, Microsoft.NETCore.App.Runtime.linux-x64 10.0.13, Microsoft.NETCore.App.Runtime.linux-x64 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.linux-x64 8.0.32, Microsoft.NETCore.App.Runtime.linux-x64 9.0.21, Microsoft.NETCore.App.Runtime.osx-arm64 10.0.13, Microsoft.NETCore.App.Runtime.osx-arm64 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.osx-arm64 8.0.32, Microsoft.NETCore.App.Runtime.osx-arm64 9.0.21, Microsoft.NETCore.App.Runtime.osx-x64 10.0.13, Microsoft.NETCore.App.Runtime.osx-x64 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.osx-x64 8.0.32, Microsoft.NETCore.App.Runtime.osx-x64 9.0.21, Microsoft.NETCore.App.Runtime.win-arm 10.0.13, Microsoft.NETCore.App.Runtime.win-arm 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.win-arm 8.0.32, Microsoft.NETCore.App.Runtime.win-arm 9.0.21, Microsoft.NETCore.App.Runtime.win-arm64 10.0.13, Microsoft.NETCore.App.Runtime.win-arm64 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.win-arm64 8.0.32, Microsoft.NETCore.App.Runtime.win-arm64 9.0.21, Microsoft.NETCore.App.Runtime.win-x64 10.0.13, Microsoft.NETCore.App.Runtime.win-x64 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.win-x64 8.0.32, Microsoft.NETCore.App.Runtime.win-x64 9.0.21, Microsoft.NETCore.App.Runtime.win-x86 10.0.13, Microsoft.NETCore.App.Runtime.win-x86 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.win-x86 8.0.32, Microsoft.NETCore.App.Runtime.win-x86 9.0.21.",
   "date_published": "2026-10-13T19:01:16Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96233/fixed/rocky-linux-10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96233/",
   "title": "CVE-2026-96233 · Microsoft .NET 10.0 runtime · fixed in Rocky Linux 10 (dotnet10.0 0:10.0.113-1.el10_2 and 2 more)",
   "content_text": "Fixed versions: dotnet10.0 0:10.0.113-1.el10_2, dotnet8.0 0:8.0.132-1.el10_2, dotnet9.0 0:9.0.122-1.el10_2.",
   "date_published": "2026-10-13T19:01:16Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96233/fixed/rocky-linux-8",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96233/",
   "title": "CVE-2026-96233 · Microsoft .NET 10.0 runtime · fixed in Rocky Linux 8 (dotnet10.0 0:10.0.113-1.el8_10 and 2 more)",
   "content_text": "Fixed versions: dotnet10.0 0:10.0.113-1.el8_10, dotnet8.0 0:8.0.132-2.el8_10, dotnet9.0 0:9.0.122-1.el8_10.",
   "date_published": "2026-10-13T19:01:16Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96233/fixed/rocky-linux-9",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96233/",
   "title": "CVE-2026-96233 · Microsoft .NET 10.0 runtime · fixed in Rocky Linux 9 (dotnet10.0 0:10.0.113-1.el9_8 and 2 more)",
   "content_text": "Fixed versions: dotnet10.0 0:10.0.113-1.el9_8, dotnet8.0 0:8.0.132-1.el9_8, dotnet9.0 0:9.0.122-1.el9_8.",
   "date_published": "2026-10-13T19:01:16Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96233/fixed/ubuntu-22.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96233/",
   "title": "CVE-2026-96233 · Microsoft .NET 10.0 runtime · fixed in Ubuntu 22.04 LTS (dotnet8 8.0.132-8.0.32-0ubuntu1~22.04.1)",
   "content_text": "Fixed versions: dotnet8 8.0.132-8.0.32-0ubuntu1~22.04.1.",
   "date_published": "2026-10-13T19:01:16Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96233/fixed/ubuntu-24.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96233/",
   "title": "CVE-2026-96233 · Microsoft .NET 10.0 runtime · fixed in Ubuntu 24.04 LTS (dotnet10 10.0.113-10.0.13-0ubuntu1~24.04.1 and 1 more)",
   "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~24.04.1, dotnet8 8.0.132-8.0.32-0ubuntu1~24.04.1.",
   "date_published": "2026-10-13T19:01:16Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96233/fixed/ubuntu-26.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96233/",
   "title": "CVE-2026-96233 · Microsoft .NET 10.0 runtime · fixed in Ubuntu 26.04 LTS (dotnet10 10.0.113-10.0.13-0ubuntu1~26.04.1)",
   "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~26.04.1.",
   "date_published": "2026-10-13T19:01:16Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96233/fixed/ubuntu-26.10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96233/",
   "title": "CVE-2026-96233 · Microsoft .NET 10.0 runtime · fixed in Ubuntu 26.10 (dotnet10 10.0.113-10.0.13-0ubuntu1~26.10.1 and 1 more)",
   "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~26.10.1, dotnet11 11.0.100-11.0.0~rc2-0ubuntu1~26.10.1.",
   "date_published": "2026-10-13T19:01:16Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-85363/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-85363/",
   "title": "CVE-2026-85363 · Microsoft .NET 10.0 runtime · disclosed",
   "content_text": "Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileges over a network.",
   "date_published": "2026-10-13T19:01:15Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-85363/fixed/nuget",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-85363/",
   "title": "CVE-2026-85363 · Microsoft .NET 10.0 runtime · fixed upstream (NuGet)",
   "content_text": "Fixed versions: Microsoft.WindowsDesktop.App.Runtime.win-arm64 10.0.13, Microsoft.WindowsDesktop.App.Runtime.win-arm64 11.0.0-rc.2, Microsoft.WindowsDesktop.App.Runtime.win-arm64 8.0.32, Microsoft.WindowsDesktop.App.Runtime.win-arm64 9.0.21, Microsoft.WindowsDesktop.App.Runtime.win-x64 10.0.13, Microsoft.WindowsDesktop.App.Runtime.win-x64 11.0.0-rc.2, Microsoft.WindowsDesktop.App.Runtime.win-x64 8.0.32, Microsoft.WindowsDesktop.App.Runtime.win-x64 9.0.21, Microsoft.WindowsDesktop.App.Runtime.win-x86 10.0.13, Microsoft.WindowsDesktop.App.Runtime.win-x86 11.0.0-rc.2, Microsoft.WindowsDesktop.App.Runtime.win-x86 8.0.32, Microsoft.WindowsDesktop.App.Runtime.win-x86 9.0.21.",
   "date_published": "2026-10-13T19:01:15Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-85363/fixed/red-hat-hummingbird-1",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-85363/",
   "title": "CVE-2026-85363 · Microsoft .NET 10.0 runtime · fixed in Red Hat hummingbird 1 (aspnetcore-runtime-8.0 0:8.0.32-0.1.hum1 and 12 more)",
   "content_text": "Fixed versions: aspnetcore-runtime-8.0 0:8.0.32-0.1.hum1, aspnetcore-runtime-dbg-8.0 0:8.0.32-0.1.hum1, aspnetcore-targeting-pack-8.0 0:8.0.32-0.1.hum1, dotnet-apphost-pack-8.0 0:8.0.32-0.1.hum1, dotnet-hostfxr-8.0 0:8.0.32-0.1.hum1, dotnet-runtime-8.0 0:8.0.32-0.1.hum1, dotnet-runtime-dbg-8.0 0:8.0.32-0.1.hum1, dotnet-sdk-8.0 0:8.0.132-0.1.hum1, dotnet-sdk-8.0-source-built-artifacts 0:8.0.132-0.1.hum1, dotnet-sdk-dbg-8.0 0:8.0.132-0.1.hum1, dotnet-targeting-pack-8.0 0:8.0.32-0.1.hum1, dotnet-templates-8.0 0:8.0.132-0.1.hum1, dotnet8.0 0:8.0.132-0.1.hum1.",
   "date_published": "2026-10-13T19:01:15Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-84008/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-84008/",
   "title": "CVE-2026-84008 · Microsoft .NET Framework 3.5 · disclosed",
   "content_text": "Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.",
   "date_published": "2026-10-13T19:01:15Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-84008/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-84008/",
   "title": "CVE-2026-84008 · Microsoft .NET Framework 3.5 · fixed in Chainguard (actions-runner 2.338.0-r2 and 10 more)",
   "content_text": "Fixed versions: actions-runner 2.338.0-r2, dotnet-10-sdk 10.0.113-r1, dotnet-8-sdk 8.0.132-r0, dotnet-9-sdk 9.0.122-r0, dotnet-sdk-10.0.2 10.0.204-r9, dotnet-sdk-10.0.3 10.0.303-r7, dotnet-sdk-10.0.4 10.0.402-r0, dotnet-sdk-stage0-10 10.0.113-r0, eco-dotnet-apidiff 0.1.7-r0, ilspycmd 11.1-r1, promitor 2.16.1-r1.",
   "date_published": "2026-10-13T19:01:15Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-84008/fixed/nuget",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-84008/",
   "title": "CVE-2026-84008 · Microsoft .NET Framework 3.5 · fixed upstream (NuGet)",
   "content_text": "Fixed versions: System.Security.Cryptography.Pkcs 10.0.13, System.Security.Cryptography.Pkcs 11.0.0-rc.2, System.Security.Cryptography.Pkcs 8.0.2, System.Security.Cryptography.Pkcs 9.0.21.",
   "date_published": "2026-10-13T19:01:15Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-84008/fixed/ubuntu-22.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-84008/",
   "title": "CVE-2026-84008 · Microsoft .NET Framework 3.5 · fixed in Ubuntu 22.04 LTS (dotnet8 8.0.132-8.0.32-0ubuntu1~22.04.1)",
   "content_text": "Fixed versions: dotnet8 8.0.132-8.0.32-0ubuntu1~22.04.1.",
   "date_published": "2026-10-13T19:01:15Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-84008/fixed/ubuntu-24.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-84008/",
   "title": "CVE-2026-84008 · Microsoft .NET Framework 3.5 · fixed in Ubuntu 24.04 LTS (dotnet10 10.0.113-10.0.13-0ubuntu1~24.04.1 and 1 more)",
   "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~24.04.1, dotnet8 8.0.132-8.0.32-0ubuntu1~24.04.1.",
   "date_published": "2026-10-13T19:01:15Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-84008/fixed/ubuntu-26.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-84008/",
   "title": "CVE-2026-84008 · Microsoft .NET Framework 3.5 · fixed in Ubuntu 26.04 LTS (dotnet10 10.0.113-10.0.13-0ubuntu1~26.04.1)",
   "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~26.04.1.",
   "date_published": "2026-10-13T19:01:15Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-84008/fixed/ubuntu-26.10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-84008/",
   "title": "CVE-2026-84008 · Microsoft .NET Framework 3.5 · fixed in Ubuntu 26.10 (dotnet10 10.0.113-10.0.13-0ubuntu1~26.10.1 and 1 more)",
   "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~26.10.1, dotnet11 11.0.100-11.0.0~rc2-0ubuntu1~26.10.1.",
   "date_published": "2026-10-13T19:01:15Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-84008/fixed/wolfi",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-84008/",
   "title": "CVE-2026-84008 · Microsoft .NET Framework 3.5 · fixed in Wolfi (dotnet-10-sdk 10.0.113-r1 and 8 more)",
   "content_text": "Fixed versions: dotnet-10-sdk 10.0.113-r1, dotnet-8-sdk 8.0.132-r0, dotnet-9-sdk 9.0.122-r0, dotnet-sdk-10.0.2 10.0.204-r9, dotnet-sdk-10.0.3 10.0.303-r7, dotnet-sdk-10.0.4 10.0.402-r0, dotnet-sdk-stage0-10 10.0.113-r0, ilspycmd 11.1-r1, promitor 2.16.1-r1.",
   "date_published": "2026-10-13T19:01:15Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-83520/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-83520/",
   "title": "CVE-2026-83520 · Microsoft .NET 10.0 runtime · disclosed",
   "content_text": "Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.",
   "date_published": "2026-10-13T19:01:15Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-83520/fixed/nuget",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-83520/",
   "title": "CVE-2026-83520 · Microsoft .NET 10.0 runtime · fixed upstream (NuGet)",
   "content_text": "Fixed versions: Microsoft.WindowsDesktop.App.Runtime.win-arm64 10.0.13, Microsoft.WindowsDesktop.App.Runtime.win-arm64 11.0.0-rc.2, Microsoft.WindowsDesktop.App.Runtime.win-arm64 8.0.32, Microsoft.WindowsDesktop.App.Runtime.win-arm64 9.0.21, Microsoft.WindowsDesktop.App.Runtime.win-x64 10.0.13, Microsoft.WindowsDesktop.App.Runtime.win-x64 11.0.0-rc.2, Microsoft.WindowsDesktop.App.Runtime.win-x64 8.0.32, Microsoft.WindowsDesktop.App.Runtime.win-x64 9.0.21, Microsoft.WindowsDesktop.App.Runtime.win-x86 10.0.13, Microsoft.WindowsDesktop.App.Runtime.win-x86 11.0.0-rc.2, Microsoft.WindowsDesktop.App.Runtime.win-x86 8.0.32, Microsoft.WindowsDesktop.App.Runtime.win-x86 9.0.21.",
   "date_published": "2026-10-13T19:01:15Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-83520/fixed/red-hat-hummingbird-1",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-83520/",
   "title": "CVE-2026-83520 · Microsoft .NET 10.0 runtime · fixed in Red Hat hummingbird 1 (aspnetcore-runtime-8.0 0:8.0.32-0.1.hum1 and 12 more)",
   "content_text": "Fixed versions: aspnetcore-runtime-8.0 0:8.0.32-0.1.hum1, aspnetcore-runtime-dbg-8.0 0:8.0.32-0.1.hum1, aspnetcore-targeting-pack-8.0 0:8.0.32-0.1.hum1, dotnet-apphost-pack-8.0 0:8.0.32-0.1.hum1, dotnet-hostfxr-8.0 0:8.0.32-0.1.hum1, dotnet-runtime-8.0 0:8.0.32-0.1.hum1, dotnet-runtime-dbg-8.0 0:8.0.32-0.1.hum1, dotnet-sdk-8.0 0:8.0.132-0.1.hum1, dotnet-sdk-8.0-source-built-artifacts 0:8.0.132-0.1.hum1, dotnet-sdk-dbg-8.0 0:8.0.132-0.1.hum1, dotnet-targeting-pack-8.0 0:8.0.32-0.1.hum1, dotnet-templates-8.0 0:8.0.132-0.1.hum1, dotnet8.0 0:8.0.132-0.1.hum1.",
   "date_published": "2026-10-13T19:01:15Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70035/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70035/",
   "title": "CVE-2026-70035 · Microsoft .NET 10.0 runtime · disclosed",
   "content_text": "Deserialization of untrusted data in .NET Framework allows an unauthorized attacker to execute code over a network.",
   "date_published": "2026-10-13T19:01:15Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70035/fixed/nuget",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70035/",
   "title": "CVE-2026-70035 · Microsoft .NET 10.0 runtime · fixed upstream (NuGet)",
   "content_text": "Fixed versions: Microsoft.WindowsDesktop.App.Runtime.win-arm64 10.0.13, Microsoft.WindowsDesktop.App.Runtime.win-arm64 11.0.0-rc.2, Microsoft.WindowsDesktop.App.Runtime.win-arm64 8.0.32, Microsoft.WindowsDesktop.App.Runtime.win-arm64 9.0.21, Microsoft.WindowsDesktop.App.Runtime.win-x64 10.0.13, Microsoft.WindowsDesktop.App.Runtime.win-x64 11.0.0-rc.2, Microsoft.WindowsDesktop.App.Runtime.win-x64 8.0.32, Microsoft.WindowsDesktop.App.Runtime.win-x64 9.0.21, Microsoft.WindowsDesktop.App.Runtime.win-x86 10.0.13, Microsoft.WindowsDesktop.App.Runtime.win-x86 11.0.0-rc.2, Microsoft.WindowsDesktop.App.Runtime.win-x86 8.0.32, Microsoft.WindowsDesktop.App.Runtime.win-x86 9.0.21.",
   "date_published": "2026-10-13T19:01:15Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70035/fixed/red-hat-hummingbird-1",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70035/",
   "title": "CVE-2026-70035 · Microsoft .NET 10.0 runtime · fixed in Red Hat hummingbird 1 (aspnetcore-runtime-8.0 0:8.0.32-0.1.hum1 and 12 more)",
   "content_text": "Fixed versions: aspnetcore-runtime-8.0 0:8.0.32-0.1.hum1, aspnetcore-runtime-dbg-8.0 0:8.0.32-0.1.hum1, aspnetcore-targeting-pack-8.0 0:8.0.32-0.1.hum1, dotnet-apphost-pack-8.0 0:8.0.32-0.1.hum1, dotnet-hostfxr-8.0 0:8.0.32-0.1.hum1, dotnet-runtime-8.0 0:8.0.32-0.1.hum1, dotnet-runtime-dbg-8.0 0:8.0.32-0.1.hum1, dotnet-sdk-8.0 0:8.0.132-0.1.hum1, dotnet-sdk-8.0-source-built-artifacts 0:8.0.132-0.1.hum1, dotnet-sdk-dbg-8.0 0:8.0.132-0.1.hum1, dotnet-targeting-pack-8.0 0:8.0.32-0.1.hum1, dotnet-templates-8.0 0:8.0.132-0.1.hum1, dotnet8.0 0:8.0.132-0.1.hum1.",
   "date_published": "2026-10-13T19:01:15Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70007/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70007/",
   "title": "CVE-2026-70007 · Microsoft .NET 10.0 runtime · disclosed",
   "content_text": "Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network.",
   "date_published": "2026-10-13T19:01:15Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70007/fixed/nuget",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70007/",
   "title": "CVE-2026-70007 · Microsoft .NET 10.0 runtime · fixed upstream (NuGet)",
   "content_text": "Fixed versions: Microsoft.WindowsDesktop.App.Runtime.win-arm64 10.0.13, Microsoft.WindowsDesktop.App.Runtime.win-arm64 11.0.0-rc.2, Microsoft.WindowsDesktop.App.Runtime.win-arm64 8.0.32, Microsoft.WindowsDesktop.App.Runtime.win-arm64 9.0.21, Microsoft.WindowsDesktop.App.Runtime.win-x64 10.0.13, Microsoft.WindowsDesktop.App.Runtime.win-x64 11.0.0-rc.2, Microsoft.WindowsDesktop.App.Runtime.win-x64 8.0.32, Microsoft.WindowsDesktop.App.Runtime.win-x64 9.0.21, Microsoft.WindowsDesktop.App.Runtime.win-x86 10.0.13, Microsoft.WindowsDesktop.App.Runtime.win-x86 11.0.0-rc.2, Microsoft.WindowsDesktop.App.Runtime.win-x86 8.0.32, Microsoft.WindowsDesktop.App.Runtime.win-x86 9.0.21.",
   "date_published": "2026-10-13T19:01:15Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70007/fixed/red-hat-hummingbird-1",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70007/",
   "title": "CVE-2026-70007 · Microsoft .NET 10.0 runtime · fixed in Red Hat hummingbird 1 (aspnetcore-runtime-8.0 0:8.0.32-0.1.hum1 and 12 more)",
   "content_text": "Fixed versions: aspnetcore-runtime-8.0 0:8.0.32-0.1.hum1, aspnetcore-runtime-dbg-8.0 0:8.0.32-0.1.hum1, aspnetcore-targeting-pack-8.0 0:8.0.32-0.1.hum1, dotnet-apphost-pack-8.0 0:8.0.32-0.1.hum1, dotnet-hostfxr-8.0 0:8.0.32-0.1.hum1, dotnet-runtime-8.0 0:8.0.32-0.1.hum1, dotnet-runtime-dbg-8.0 0:8.0.32-0.1.hum1, dotnet-sdk-8.0 0:8.0.132-0.1.hum1, dotnet-sdk-8.0-source-built-artifacts 0:8.0.132-0.1.hum1, dotnet-sdk-dbg-8.0 0:8.0.132-0.1.hum1, dotnet-targeting-pack-8.0 0:8.0.32-0.1.hum1, dotnet-templates-8.0 0:8.0.132-0.1.hum1, dotnet8.0 0:8.0.132-0.1.hum1.",
   "date_published": "2026-10-13T19:01:15Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96224/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96224/",
   "title": "CVE-2026-96224 · Microsoft .NET 10.0 runtime · disclosed",
   "content_text": "Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.",
   "date_published": "2026-10-13T19:00:31Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96224/fixed/nuget",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96224/",
   "title": "CVE-2026-96224 · Microsoft .NET 10.0 runtime · fixed upstream (NuGet)",
   "content_text": "Fixed versions: Microsoft.WindowsDesktop.App.Runtime.win-arm64 10.0.13, Microsoft.WindowsDesktop.App.Runtime.win-arm64 11.0.0-rc.2, Microsoft.WindowsDesktop.App.Runtime.win-arm64 8.0.32, Microsoft.WindowsDesktop.App.Runtime.win-arm64 9.0.21, Microsoft.WindowsDesktop.App.Runtime.win-x64 10.0.13, Microsoft.WindowsDesktop.App.Runtime.win-x64 11.0.0-rc.2, Microsoft.WindowsDesktop.App.Runtime.win-x64 8.0.32, Microsoft.WindowsDesktop.App.Runtime.win-x64 9.0.21, Microsoft.WindowsDesktop.App.Runtime.win-x86 10.0.13, Microsoft.WindowsDesktop.App.Runtime.win-x86 11.0.0-rc.2, Microsoft.WindowsDesktop.App.Runtime.win-x86 8.0.32, Microsoft.WindowsDesktop.App.Runtime.win-x86 9.0.21.",
   "date_published": "2026-10-13T19:00:31Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96222/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96222/",
   "title": "CVE-2026-96222 · Microsoft .NET Framework 3.5 · disclosed",
   "content_text": "Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.",
   "date_published": "2026-10-13T19:00:31Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96222/fixed/almalinux-10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96222/",
   "title": "CVE-2026-96222 · Microsoft .NET Framework 3.5 · fixed in AlmaLinux 10 (aspnetcore-runtime-8.0 8.0.32-1.el10_2 and 11 more)",
   "content_text": "Fixed versions: aspnetcore-runtime-8.0 8.0.32-1.el10_2, aspnetcore-runtime-dbg-8.0 8.0.32-1.el10_2, aspnetcore-targeting-pack-8.0 8.0.32-1.el10_2, dotnet-apphost-pack-8.0 8.0.32-1.el10_2, dotnet-hostfxr-8.0 8.0.32-1.el10_2, dotnet-runtime-8.0 8.0.32-1.el10_2, dotnet-runtime-dbg-8.0 8.0.32-1.el10_2, dotnet-sdk-8.0 8.0.132-1.el10_2, dotnet-sdk-8.0-source-built-artifacts 8.0.132-1.el10_2, dotnet-sdk-dbg-8.0 8.0.132-1.el10_2, dotnet-targeting-pack-8.0 8.0.32-1.el10_2, dotnet-templates-8.0 8.0.132-1.el10_2.",
   "date_published": "2026-10-13T19:00:31Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96222/fixed/almalinux-8",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96222/",
   "title": "CVE-2026-96222 · Microsoft .NET Framework 3.5 · fixed in AlmaLinux 8 (aspnetcore-runtime-8.0 8.0.32-2.el8_10 and 11 more)",
   "content_text": "Fixed versions: aspnetcore-runtime-8.0 8.0.32-2.el8_10, aspnetcore-runtime-dbg-8.0 8.0.32-2.el8_10, aspnetcore-targeting-pack-8.0 8.0.32-2.el8_10, dotnet-apphost-pack-8.0 8.0.32-2.el8_10, dotnet-hostfxr-8.0 8.0.32-2.el8_10, dotnet-runtime-8.0 8.0.32-2.el8_10, dotnet-runtime-dbg-8.0 8.0.32-2.el8_10, dotnet-sdk-8.0 8.0.132-2.el8_10, dotnet-sdk-8.0-source-built-artifacts 8.0.132-2.el8_10, dotnet-sdk-dbg-8.0 8.0.132-2.el8_10, dotnet-targeting-pack-8.0 8.0.32-2.el8_10, dotnet-templates-8.0 8.0.132-2.el8_10.",
   "date_published": "2026-10-13T19:00:31Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96222/fixed/almalinux-9",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96222/",
   "title": "CVE-2026-96222 · Microsoft .NET Framework 3.5 · fixed in AlmaLinux 9 (aspnetcore-runtime-8.0 8.0.32-1.el9_8 and 11 more)",
   "content_text": "Fixed versions: aspnetcore-runtime-8.0 8.0.32-1.el9_8, aspnetcore-runtime-dbg-8.0 8.0.32-1.el9_8, aspnetcore-targeting-pack-8.0 8.0.32-1.el9_8, dotnet-apphost-pack-8.0 8.0.32-1.el9_8, dotnet-hostfxr-8.0 8.0.32-1.el9_8, dotnet-runtime-8.0 8.0.32-1.el9_8, dotnet-runtime-dbg-8.0 8.0.32-1.el9_8, dotnet-sdk-8.0 8.0.132-1.el9_8, dotnet-sdk-8.0-source-built-artifacts 8.0.132-1.el9_8, dotnet-sdk-dbg-8.0 8.0.132-1.el9_8, dotnet-targeting-pack-8.0 8.0.32-1.el9_8, dotnet-templates-8.0 8.0.132-1.el9_8.",
   "date_published": "2026-10-13T19:00:31Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96222/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96222/",
   "title": "CVE-2026-96222 · Microsoft .NET Framework 3.5 · fixed in Chainguard (dotnet-8-sdk 8.0.132-r0)",
   "content_text": "Fixed versions: dotnet-8-sdk 8.0.132-r0.",
   "date_published": "2026-10-13T19:00:31Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96222/fixed/nuget",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96222/",
   "title": "CVE-2026-96222 · Microsoft .NET Framework 3.5 · fixed upstream (NuGet)",
   "content_text": "Fixed versions: System.Security.Cryptography.Xml 8.0.5.",
   "date_published": "2026-10-13T19:00:31Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96222/fixed/red-hat-hummingbird-1",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96222/",
   "title": "CVE-2026-96222 · Microsoft .NET Framework 3.5 · fixed in Red Hat hummingbird 1 (aspnetcore-runtime-8.0 0:8.0.32-0.1.hum1 and 12 more)",
   "content_text": "Fixed versions: aspnetcore-runtime-8.0 0:8.0.32-0.1.hum1, aspnetcore-runtime-dbg-8.0 0:8.0.32-0.1.hum1, aspnetcore-targeting-pack-8.0 0:8.0.32-0.1.hum1, dotnet-apphost-pack-8.0 0:8.0.32-0.1.hum1, dotnet-hostfxr-8.0 0:8.0.32-0.1.hum1, dotnet-runtime-8.0 0:8.0.32-0.1.hum1, dotnet-runtime-dbg-8.0 0:8.0.32-0.1.hum1, dotnet-sdk-8.0 0:8.0.132-0.1.hum1, dotnet-sdk-8.0-source-built-artifacts 0:8.0.132-0.1.hum1, dotnet-sdk-dbg-8.0 0:8.0.132-0.1.hum1, dotnet-targeting-pack-8.0 0:8.0.32-0.1.hum1, dotnet-templates-8.0 0:8.0.132-0.1.hum1, dotnet8.0 0:8.0.132-0.1.hum1.",
   "date_published": "2026-10-13T19:00:31Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96222/fixed/rocky-linux-10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96222/",
   "title": "CVE-2026-96222 · Microsoft .NET Framework 3.5 · fixed in Rocky Linux 10 (dotnet8.0 0:8.0.132-1.el10_2)",
   "content_text": "Fixed versions: dotnet8.0 0:8.0.132-1.el10_2.",
   "date_published": "2026-10-13T19:00:31Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96222/fixed/rocky-linux-8",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96222/",
   "title": "CVE-2026-96222 · Microsoft .NET Framework 3.5 · fixed in Rocky Linux 8 (dotnet8.0 0:8.0.132-2.el8_10)",
   "content_text": "Fixed versions: dotnet8.0 0:8.0.132-2.el8_10.",
   "date_published": "2026-10-13T19:00:31Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96222/fixed/rocky-linux-9",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96222/",
   "title": "CVE-2026-96222 · Microsoft .NET Framework 3.5 · fixed in Rocky Linux 9 (dotnet8.0 0:8.0.132-1.el9_8)",
   "content_text": "Fixed versions: dotnet8.0 0:8.0.132-1.el9_8.",
   "date_published": "2026-10-13T19:00:31Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96222/fixed/ubuntu-22.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96222/",
   "title": "CVE-2026-96222 · Microsoft .NET Framework 3.5 · fixed in Ubuntu 22.04 LTS (dotnet8 8.0.132-8.0.32-0ubuntu1~22.04.1)",
   "content_text": "Fixed versions: dotnet8 8.0.132-8.0.32-0ubuntu1~22.04.1.",
   "date_published": "2026-10-13T19:00:31Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96222/fixed/ubuntu-24.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96222/",
   "title": "CVE-2026-96222 · Microsoft .NET Framework 3.5 · fixed in Ubuntu 24.04 LTS (dotnet10 10.0.113-10.0.13-0ubuntu1~24.04.1 and 1 more)",
   "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~24.04.1, dotnet8 8.0.132-8.0.32-0ubuntu1~24.04.1.",
   "date_published": "2026-10-13T19:00:31Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96222/fixed/ubuntu-26.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96222/",
   "title": "CVE-2026-96222 · Microsoft .NET Framework 3.5 · fixed in Ubuntu 26.04 LTS (dotnet10 10.0.113-10.0.13-0ubuntu1~26.04.1)",
   "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~26.04.1.",
   "date_published": "2026-10-13T19:00:31Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96222/fixed/ubuntu-26.10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96222/",
   "title": "CVE-2026-96222 · Microsoft .NET Framework 3.5 · fixed in Ubuntu 26.10 (dotnet10 10.0.113-10.0.13-0ubuntu1~26.10.1 and 1 more)",
   "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~26.10.1, dotnet11 11.0.100-11.0.0~rc2-0ubuntu1~26.10.1.",
   "date_published": "2026-10-13T19:00:31Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96222/fixed/wolfi",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96222/",
   "title": "CVE-2026-96222 · Microsoft .NET Framework 3.5 · fixed in Wolfi (dotnet-8-sdk 8.0.132-r0)",
   "content_text": "Fixed versions: dotnet-8-sdk 8.0.132-r0.",
   "date_published": "2026-10-13T19:00:31Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70174/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70174/",
   "title": "CVE-2026-70174 · Microsoft .NET 10.0 runtime · disclosed",
   "content_text": "Improperly implemented security check for standard in .NET allows an unauthorized attacker to execute code over a network.",
   "date_published": "2026-10-13T19:00:25Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70174/fixed/nuget",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70174/",
   "title": "CVE-2026-70174 · Microsoft .NET 10.0 runtime · fixed upstream (NuGet)",
   "content_text": "Fixed versions: Microsoft.WindowsDesktop.App.Runtime.win-arm64 10.0.13, Microsoft.WindowsDesktop.App.Runtime.win-arm64 11.0.0-rc.2, Microsoft.WindowsDesktop.App.Runtime.win-arm64 8.0.32, Microsoft.WindowsDesktop.App.Runtime.win-arm64 9.0.21, Microsoft.WindowsDesktop.App.Runtime.win-x64 10.0.13, Microsoft.WindowsDesktop.App.Runtime.win-x64 11.0.0-rc.2, Microsoft.WindowsDesktop.App.Runtime.win-x64 8.0.32, Microsoft.WindowsDesktop.App.Runtime.win-x64 9.0.21, Microsoft.WindowsDesktop.App.Runtime.win-x86 10.0.13, Microsoft.WindowsDesktop.App.Runtime.win-x86 11.0.0-rc.2, Microsoft.WindowsDesktop.App.Runtime.win-x86 8.0.32, Microsoft.WindowsDesktop.App.Runtime.win-x86 9.0.21.",
   "date_published": "2026-10-13T19:00:25Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-69651/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-69651/",
   "title": "CVE-2026-69651 · Microsoft .NET 10.0 runtime · disclosed",
   "content_text": "Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.",
   "date_published": "2026-10-13T18:59:44Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-69651/fixed/almalinux-10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-69651/",
   "title": "CVE-2026-69651 · Microsoft .NET 10.0 runtime · fixed in AlmaLinux 10 (aspnetcore-runtime-10.0 10.0.13-1.el10_2 and 39 more)",
   "content_text": "Fixed versions: aspnetcore-runtime-10.0 10.0.13-1.el10_2, aspnetcore-runtime-8.0 8.0.32-1.el10_2, aspnetcore-runtime-9.0 9.0.21-1.el10_2, aspnetcore-runtime-dbg-10.0 10.0.13-1.el10_2, aspnetcore-runtime-dbg-8.0 8.0.32-1.el10_2, aspnetcore-runtime-dbg-9.0 9.0.21-1.el10_2, aspnetcore-targeting-pack-10.0 10.0.13-1.el10_2, aspnetcore-targeting-pack-8.0 8.0.32-1.el10_2, aspnetcore-targeting-pack-9.0 9.0.21-1.el10_2, dotnet-apphost-pack-10.0 10.0.13-1.el10_2, dotnet-apphost-pack-8.0 8.0.32-1.el10_2, dotnet-apphost-pack-9.0 9.0.21-1.el10_2, dotnet-host 10.0.13-1.el10_2, dotnet-hostfxr-10.0 10.0.13-1.el10_2, dotnet-hostfxr-8.0 8.0.32-1.el10_2, dotnet-hostfxr-9.0 9.0.21-1.el10_2, dotnet-runtime-10.0 10.0.13-1.el10_2, dotnet-runtime-8.0 8.0.32-1.el10_2, dotnet-runtime-9.0 9.0.21-1.el10_2, dotnet-runtime-dbg-10.0 10.0.13-1.el10_2, dotnet-runtime-dbg-8.0 8.0.32-1.el10_2, dotnet-runtime-dbg-9.0 9.0.21-1.el10_2, dotnet-sdk-10.0 10.0.113-1.el10_2, dotnet-sdk-10.0-source-built-artifacts 10.0.113-1.el10_2, dotnet-sdk-8.0 8.0.132-1.el10_2, dotnet-sdk-8.0-source-built-artifacts 8.0.132-1.el10_2, dotnet-sdk-9.0 9.0.122-1.el10_2, dotnet-sdk-9.0-source-built-artifacts 9.0.122-1.el10_2, dotnet-sdk-aot-10.0 10.0.113-1.el10_2, dotnet-sdk-aot-9.0 9.0.122-1.el10_2, dotnet-sdk-dbg-10.0 10.0.113-1.el10_2, dotnet-sdk-dbg-8.0 8.0.132-1.el10_2, dotnet-sdk-dbg-9.0 9.0.122-1.el10_2, dotnet-targeting-pack-10.0 10.0.13-1.el10_2, dotnet-targeting-pack-8.0 8.0.32-1.el10_2, dotnet-targeting-pack-9.0 9.0.21-1.el10_2, dotnet-templates-10.0 10.0.113-1.el10_2, dotnet-templates-8.0 8.0.132-1.el10_2, dotnet-templates-9.0 9.0.122-1.el10_2, netstandard-targeting-pack-2.1 9.0.122-1.el10_2.",
   "date_published": "2026-10-13T18:59:44Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-69651/fixed/almalinux-8",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-69651/",
   "title": "CVE-2026-69651 · Microsoft .NET 10.0 runtime · fixed in AlmaLinux 8 (aspnetcore-runtime-10.0 10.0.13-1.el8_10 and 39 more)",
   "content_text": "Fixed versions: aspnetcore-runtime-10.0 10.0.13-1.el8_10, aspnetcore-runtime-8.0 8.0.32-2.el8_10, aspnetcore-runtime-9.0 9.0.21-1.el8_10, aspnetcore-runtime-dbg-10.0 10.0.13-1.el8_10, aspnetcore-runtime-dbg-8.0 8.0.32-2.el8_10, aspnetcore-runtime-dbg-9.0 9.0.21-1.el8_10, aspnetcore-targeting-pack-10.0 10.0.13-1.el8_10, aspnetcore-targeting-pack-8.0 8.0.32-2.el8_10, aspnetcore-targeting-pack-9.0 9.0.21-1.el8_10, dotnet 10.0.113-1.el8_10, dotnet-apphost-pack-10.0 10.0.13-1.el8_10, dotnet-apphost-pack-8.0 8.0.32-2.el8_10, dotnet-apphost-pack-9.0 9.0.21-1.el8_10, dotnet-hostfxr-10.0 10.0.13-1.el8_10, dotnet-hostfxr-8.0 8.0.32-2.el8_10, dotnet-hostfxr-9.0 9.0.21-1.el8_10, dotnet-runtime-10.0 10.0.13-1.el8_10, dotnet-runtime-8.0 8.0.32-2.el8_10, dotnet-runtime-9.0 9.0.21-1.el8_10, dotnet-runtime-dbg-10.0 10.0.13-1.el8_10, dotnet-runtime-dbg-8.0 8.0.32-2.el8_10, dotnet-runtime-dbg-9.0 9.0.21-1.el8_10, dotnet-sdk-10.0 10.0.113-1.el8_10, dotnet-sdk-10.0-source-built-artifacts 10.0.113-1.el8_10, dotnet-sdk-8.0 8.0.132-2.el8_10, dotnet-sdk-8.0-source-built-artifacts 8.0.132-2.el8_10, dotnet-sdk-9.0 9.0.122-1.el8_10, dotnet-sdk-9.0-source-built-artifacts 9.0.122-1.el8_10, dotnet-sdk-aot-10.0 10.0.113-1.el8_10, dotnet-sdk-aot-9.0 9.0.122-1.el8_10, dotnet-sdk-dbg-10.0 10.0.113-1.el8_10, dotnet-sdk-dbg-8.0 8.0.132-2.el8_10, dotnet-sdk-dbg-9.0 9.0.122-1.el8_10, dotnet-targeting-pack-10.0 10.0.13-1.el8_10, dotnet-targeting-pack-8.0 8.0.32-2.el8_10, dotnet-targeting-pack-9.0 9.0.21-1.el8_10, dotnet-templates-10.0 10.0.113-1.el8_10, dotnet-templates-8.0 8.0.132-2.el8_10, dotnet-templates-9.0 9.0.122-1.el8_10, netstandard-targeting-pack-2.1 9.0.122-1.el8_10.",
   "date_published": "2026-10-13T18:59:44Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-69651/fixed/almalinux-9",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-69651/",
   "title": "CVE-2026-69651 · Microsoft .NET 10.0 runtime · fixed in AlmaLinux 9 (aspnetcore-runtime-10.0 10.0.13-1.el9_8 and 39 more)",
   "content_text": "Fixed versions: aspnetcore-runtime-10.0 10.0.13-1.el9_8, aspnetcore-runtime-8.0 8.0.32-1.el9_8, aspnetcore-runtime-9.0 9.0.21-1.el9_8, aspnetcore-runtime-dbg-10.0 10.0.13-1.el9_8, aspnetcore-runtime-dbg-8.0 8.0.32-1.el9_8, aspnetcore-runtime-dbg-9.0 9.0.21-1.el9_8, aspnetcore-targeting-pack-10.0 10.0.13-1.el9_8, aspnetcore-targeting-pack-8.0 8.0.32-1.el9_8, aspnetcore-targeting-pack-9.0 9.0.21-1.el9_8, dotnet-apphost-pack-10.0 10.0.13-1.el9_8, dotnet-apphost-pack-8.0 8.0.32-1.el9_8, dotnet-apphost-pack-9.0 9.0.21-1.el9_8, dotnet-host 10.0.13-1.el9_8, dotnet-hostfxr-10.0 10.0.13-1.el9_8, dotnet-hostfxr-8.0 8.0.32-1.el9_8, dotnet-hostfxr-9.0 9.0.21-1.el9_8, dotnet-runtime-10.0 10.0.13-1.el9_8, dotnet-runtime-8.0 8.0.32-1.el9_8, dotnet-runtime-9.0 9.0.21-1.el9_8, dotnet-runtime-dbg-10.0 10.0.13-1.el9_8, dotnet-runtime-dbg-8.0 8.0.32-1.el9_8, dotnet-runtime-dbg-9.0 9.0.21-1.el9_8, dotnet-sdk-10.0 10.0.113-1.el9_8, dotnet-sdk-10.0-source-built-artifacts 10.0.113-1.el9_8, dotnet-sdk-8.0 8.0.132-1.el9_8, dotnet-sdk-8.0-source-built-artifacts 8.0.132-1.el9_8, dotnet-sdk-9.0 9.0.122-1.el9_8, dotnet-sdk-9.0-source-built-artifacts 9.0.122-1.el9_8, dotnet-sdk-aot-10.0 10.0.113-1.el9_8, dotnet-sdk-aot-9.0 9.0.122-1.el9_8, dotnet-sdk-dbg-10.0 10.0.113-1.el9_8, dotnet-sdk-dbg-8.0 8.0.132-1.el9_8, dotnet-sdk-dbg-9.0 9.0.122-1.el9_8, dotnet-targeting-pack-10.0 10.0.13-1.el9_8, dotnet-targeting-pack-8.0 8.0.32-1.el9_8, dotnet-targeting-pack-9.0 9.0.21-1.el9_8, dotnet-templates-10.0 10.0.113-1.el9_8, dotnet-templates-8.0 8.0.132-1.el9_8, dotnet-templates-9.0 9.0.122-1.el9_8, netstandard-targeting-pack-2.1 9.0.122-1.el9_8.",
   "date_published": "2026-10-13T18:59:44Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-69651/fixed/nuget",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-69651/",
   "title": "CVE-2026-69651 · Microsoft .NET 10.0 runtime · fixed upstream (NuGet)",
   "content_text": "Fixed versions: Microsoft.NETCore.App.Runtime.linux-arm 10.0.13, Microsoft.NETCore.App.Runtime.linux-arm 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.linux-arm 8.0.32, Microsoft.NETCore.App.Runtime.linux-arm 9.0.21, Microsoft.NETCore.App.Runtime.linux-arm64 10.0.13, Microsoft.NETCore.App.Runtime.linux-arm64 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.linux-arm64 8.0.32, Microsoft.NETCore.App.Runtime.linux-arm64 9.0.21, Microsoft.NETCore.App.Runtime.linux-musl-arm 10.0.13, Microsoft.NETCore.App.Runtime.linux-musl-arm 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.linux-musl-arm 8.0.32, Microsoft.NETCore.App.Runtime.linux-musl-arm 9.0.21, Microsoft.NETCore.App.Runtime.linux-musl-arm64 10.0.13, Microsoft.NETCore.App.Runtime.linux-musl-arm64 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.linux-musl-arm64 8.0.32, Microsoft.NETCore.App.Runtime.linux-musl-arm64 9.0.21, Microsoft.NETCore.App.Runtime.linux-musl-x64 10.0.13, Microsoft.NETCore.App.Runtime.linux-musl-x64 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.linux-musl-x64 8.0.32, Microsoft.NETCore.App.Runtime.linux-musl-x64 9.0.21, Microsoft.NETCore.App.Runtime.linux-x64 10.0.13, Microsoft.NETCore.App.Runtime.linux-x64 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.linux-x64 8.0.32, Microsoft.NETCore.App.Runtime.linux-x64 9.0.21, Microsoft.NETCore.App.Runtime.osx-arm64 10.0.13, Microsoft.NETCore.App.Runtime.osx-arm64 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.osx-arm64 8.0.32, Microsoft.NETCore.App.Runtime.osx-arm64 9.0.21, Microsoft.NETCore.App.Runtime.osx-x64 10.0.13, Microsoft.NETCore.App.Runtime.osx-x64 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.osx-x64 8.0.32, Microsoft.NETCore.App.Runtime.osx-x64 9.0.21, Microsoft.NETCore.App.Runtime.win-arm64 10.0.13, Microsoft.NETCore.App.Runtime.win-arm64 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.win-arm64 8.0.32, Microsoft.NETCore.App.Runtime.win-arm64 9.0.21, Microsoft.NETCore.App.Runtime.win-x64 10.0.13, Microsoft.NETCore.App.Runtime.win-x64 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.win-x64 8.0.32, Microsoft.NETCore.App.Runtime.win-x64 9.0.21, Microsoft.NETCore.App.Runtime.win-x86 10.0.13, Microsoft.NETCore.App.Runtime.win-x86 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.win-x86 8.0.32, Microsoft.NETCore.App.Runtime.win-x86 9.0.21.",
   "date_published": "2026-10-13T18:59:44Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-69651/fixed/red-hat-hummingbird-1",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-69651/",
   "title": "CVE-2026-69651 · Microsoft .NET 10.0 runtime · fixed in Red Hat hummingbird 1 (aspnetcore-runtime-8.0 0:8.0.32-0.1.hum1 and 33 more)",
   "content_text": "Fixed versions: aspnetcore-runtime-8.0 0:8.0.32-0.1.hum1, aspnetcore-runtime-9.0 0:9.0.21-0.1.hum1, aspnetcore-runtime-dbg-8.0 0:8.0.32-0.1.hum1, aspnetcore-runtime-dbg-9.0 0:9.0.21-0.1.hum1, aspnetcore-targeting-pack-8.0 0:8.0.32-0.1.hum1, aspnetcore-targeting-pack-9.0 0:9.0.21-0.1.hum1, dotnet-apphost-pack-8.0 0:8.0.32-0.1.hum1, dotnet-apphost-pack-9.0 0:9.0.21-0.1.hum1, dotnet-hostfxr-8.0 0:8.0.32-0.1.hum1, dotnet-hostfxr-9.0 0:9.0.21-0.1.hum1, dotnet-runtime-8.0 0:8.0.32-0.1.hum1, dotnet-runtime-9.0 0:9.0.21-0.1.hum1, dotnet-runtime-dbg-8.0 0:8.0.32-0.1.hum1, dotnet-runtime-dbg-9.0 0:9.0.21-0.1.hum1, dotnet-sdk-10.0 0:10.0.113-1.hum1, dotnet-sdk-10.0-source-built-artifacts 0:10.0.113-1.hum1, dotnet-sdk-8.0 0:8.0.132-0.1.hum1, dotnet-sdk-8.0-source-built-artifacts 0:8.0.132-0.1.hum1, dotnet-sdk-9.0 0:9.0.122-0.1.hum1, dotnet-sdk-9.0-source-built-artifacts 0:9.0.122-0.1.hum1, dotnet-sdk-aot-10.0 0:10.0.113-1.hum1, dotnet-sdk-aot-9.0 0:9.0.122-0.1.hum1, dotnet-sdk-dbg-10.0 0:10.0.113-1.hum1, dotnet-sdk-dbg-8.0 0:8.0.132-0.1.hum1, dotnet-sdk-dbg-9.0 0:9.0.122-0.1.hum1, dotnet-targeting-pack-8.0 0:8.0.32-0.1.hum1, dotnet-targeting-pack-9.0 0:9.0.21-0.1.hum1, dotnet-templates-10.0 0:10.0.113-1.hum1, dotnet-templates-8.0 0:8.0.132-0.1.hum1, dotnet-templates-9.0 0:9.0.122-0.1.hum1, dotnet10.0 0:10.0.113-1.hum1, dotnet8.0 0:8.0.132-0.1.hum1, dotnet9.0 0:9.0.122-0.1.hum1, netstandard-targeting-pack-2.1 0:9.0.122-0.1.hum1.",
   "date_published": "2026-10-13T18:59:44Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-69651/fixed/rocky-linux-10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-69651/",
   "title": "CVE-2026-69651 · Microsoft .NET 10.0 runtime · fixed in Rocky Linux 10 (dotnet10.0 0:10.0.113-1.el10_2 and 2 more)",
   "content_text": "Fixed versions: dotnet10.0 0:10.0.113-1.el10_2, dotnet8.0 0:8.0.132-1.el10_2, dotnet9.0 0:9.0.122-1.el10_2.",
   "date_published": "2026-10-13T18:59:44Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-69651/fixed/rocky-linux-8",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-69651/",
   "title": "CVE-2026-69651 · Microsoft .NET 10.0 runtime · fixed in Rocky Linux 8 (dotnet10.0 0:10.0.113-1.el8_10 and 2 more)",
   "content_text": "Fixed versions: dotnet10.0 0:10.0.113-1.el8_10, dotnet8.0 0:8.0.132-2.el8_10, dotnet9.0 0:9.0.122-1.el8_10.",
   "date_published": "2026-10-13T18:59:44Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-69651/fixed/rocky-linux-9",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-69651/",
   "title": "CVE-2026-69651 · Microsoft .NET 10.0 runtime · fixed in Rocky Linux 9 (dotnet10.0 0:10.0.113-1.el9_8 and 2 more)",
   "content_text": "Fixed versions: dotnet10.0 0:10.0.113-1.el9_8, dotnet8.0 0:8.0.132-1.el9_8, dotnet9.0 0:9.0.122-1.el9_8.",
   "date_published": "2026-10-13T18:59:44Z"
  }
 ]
}