{
 "version": "https://jsonfeed.org/version/1.1",
 "title": "Microsoft Visual Studio 2022 version 17.14: all CVE events",
 "home_page_url": "https://patchwire.jonathanross.dev/products/microsoft--microsoft-visual-studio-2022-version-17-14/",
 "feed_url": "https://patchwire.jonathanross.dev/feeds/products/microsoft--microsoft-visual-studio-2022-version-17-14/all.json",
 "authors": [
  {
   "name": "Patchwire"
  }
 ],
 "language": "en",
 "items": [
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109468/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109468/",
   "title": "CVE-2026-109468 · Microsoft Visual Studio 2022 version 17.14 · disclosed",
   "content_text": "Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.",
   "date_published": "2026-10-15T20:57:33Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-105016/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-105016/",
   "title": "CVE-2026-105016 · Microsoft .NET 10.0 runtime · disclosed",
   "content_text": "Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network.",
   "date_published": "2026-10-13T19:01:45Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-105016/fixed/nuget",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-105016/",
   "title": "CVE-2026-105016 · Microsoft .NET 10.0 runtime · fixed upstream (NuGet)",
   "content_text": "Fixed versions: Microsoft.Native.Quic.MsQuic.Schannel 2.5.11-ci.159417053.",
   "date_published": "2026-10-13T19:01:45Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70162/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70162/",
   "title": "CVE-2026-70162 · Microsoft Visual Studio 2022 version 17.14 · disclosed",
   "content_text": "A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET web application.\nA remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to the .NET application.\nThe update addresses the vulnerability by correcting how the .NET web application handles web requests.",
   "date_published": "2026-10-13T19:01:37Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70162/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70162/",
   "title": "CVE-2026-70162 · Microsoft Visual Studio 2022 version 17.14 · fixed in Chainguard (actions-runner 2.338.0-r2 and 10 more)",
   "content_text": "Fixed versions: actions-runner 2.338.0-r2, dotnet-10-sdk 10.0.113-r1, dotnet-8-sdk 8.0.132-r0, dotnet-9-sdk 9.0.122-r0, dotnet-sdk-10.0.2 10.0.204-r9, dotnet-sdk-10.0.3 10.0.303-r7, dotnet-sdk-10.0.4 10.0.402-r0, dotnet-sdk-stage0-10 10.0.113-r0, eco-dotnet-apidiff 0.1.7-r0, ilspycmd 11.1-r1, promitor 2.16.1-r1.",
   "date_published": "2026-10-13T19:01:37Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70162/fixed/nuget",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70162/",
   "title": "CVE-2026-70162 · Microsoft Visual Studio 2022 version 17.14 · fixed upstream (NuGet)",
   "content_text": "Fixed versions: System.Security.Cryptography.Pkcs 10.0.13, System.Security.Cryptography.Pkcs 11.0.0-rc.2, System.Security.Cryptography.Pkcs 8.0.2, System.Security.Cryptography.Pkcs 9.0.21.",
   "date_published": "2026-10-13T19:01:37Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70162/fixed/wolfi",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70162/",
   "title": "CVE-2026-70162 · Microsoft Visual Studio 2022 version 17.14 · fixed in Wolfi (dotnet-10-sdk 10.0.113-r1 and 8 more)",
   "content_text": "Fixed versions: dotnet-10-sdk 10.0.113-r1, dotnet-8-sdk 8.0.132-r0, dotnet-9-sdk 9.0.122-r0, dotnet-sdk-10.0.2 10.0.204-r9, dotnet-sdk-10.0.3 10.0.303-r7, dotnet-sdk-10.0.4 10.0.402-r0, dotnet-sdk-stage0-10 10.0.113-r0, ilspycmd 11.1-r1, promitor 2.16.1-r1.",
   "date_published": "2026-10-13T19:01:37Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102869/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102869/",
   "title": "CVE-2026-102869 · Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 · disclosed",
   "content_text": "Access of resource using incompatible type ('type confusion') in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network.",
   "date_published": "2026-10-13T19:01:35Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102870/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102870/",
   "title": "CVE-2026-102870 · Microsoft .NET 10.0 installed on Linux · disclosed",
   "content_text": "Improper control of generation of code ('code injection') in ASP.NET Core allows an unauthorized attacker to execute code over a network.",
   "date_published": "2026-10-13T19:01:30Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102870/fixed/almalinux-10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102870/",
   "title": "CVE-2026-102870 · Microsoft .NET 10.0 installed on Linux · fixed in AlmaLinux 10 (aspnetcore-runtime-10.0 10.0.13-1.el10_2 and 13 more)",
   "content_text": "Fixed versions: aspnetcore-runtime-10.0 10.0.13-1.el10_2, aspnetcore-runtime-dbg-10.0 10.0.13-1.el10_2, aspnetcore-targeting-pack-10.0 10.0.13-1.el10_2, dotnet-apphost-pack-10.0 10.0.13-1.el10_2, dotnet-host 10.0.13-1.el10_2, dotnet-hostfxr-10.0 10.0.13-1.el10_2, dotnet-runtime-10.0 10.0.13-1.el10_2, dotnet-runtime-dbg-10.0 10.0.13-1.el10_2, dotnet-sdk-10.0 10.0.113-1.el10_2, dotnet-sdk-10.0-source-built-artifacts 10.0.113-1.el10_2, dotnet-sdk-aot-10.0 10.0.113-1.el10_2, dotnet-sdk-dbg-10.0 10.0.113-1.el10_2, dotnet-targeting-pack-10.0 10.0.13-1.el10_2, dotnet-templates-10.0 10.0.113-1.el10_2.",
   "date_published": "2026-10-13T19:01:30Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102870/fixed/almalinux-8",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102870/",
   "title": "CVE-2026-102870 · Microsoft .NET 10.0 installed on Linux · fixed in AlmaLinux 8 (aspnetcore-runtime-10.0 10.0.13-1.el8_10 and 13 more)",
   "content_text": "Fixed versions: aspnetcore-runtime-10.0 10.0.13-1.el8_10, aspnetcore-runtime-dbg-10.0 10.0.13-1.el8_10, aspnetcore-targeting-pack-10.0 10.0.13-1.el8_10, dotnet 10.0.113-1.el8_10, dotnet-apphost-pack-10.0 10.0.13-1.el8_10, dotnet-hostfxr-10.0 10.0.13-1.el8_10, dotnet-runtime-10.0 10.0.13-1.el8_10, dotnet-runtime-dbg-10.0 10.0.13-1.el8_10, dotnet-sdk-10.0 10.0.113-1.el8_10, dotnet-sdk-10.0-source-built-artifacts 10.0.113-1.el8_10, dotnet-sdk-aot-10.0 10.0.113-1.el8_10, dotnet-sdk-dbg-10.0 10.0.113-1.el8_10, dotnet-targeting-pack-10.0 10.0.13-1.el8_10, dotnet-templates-10.0 10.0.113-1.el8_10.",
   "date_published": "2026-10-13T19:01:30Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102870/fixed/almalinux-9",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102870/",
   "title": "CVE-2026-102870 · Microsoft .NET 10.0 installed on Linux · fixed in AlmaLinux 9 (aspnetcore-runtime-10.0 10.0.13-1.el9_8 and 13 more)",
   "content_text": "Fixed versions: aspnetcore-runtime-10.0 10.0.13-1.el9_8, aspnetcore-runtime-dbg-10.0 10.0.13-1.el9_8, aspnetcore-targeting-pack-10.0 10.0.13-1.el9_8, dotnet-apphost-pack-10.0 10.0.13-1.el9_8, dotnet-host 10.0.13-1.el9_8, dotnet-hostfxr-10.0 10.0.13-1.el9_8, dotnet-runtime-10.0 10.0.13-1.el9_8, dotnet-runtime-dbg-10.0 10.0.13-1.el9_8, dotnet-sdk-10.0 10.0.113-1.el9_8, dotnet-sdk-10.0-source-built-artifacts 10.0.113-1.el9_8, dotnet-sdk-aot-10.0 10.0.113-1.el9_8, dotnet-sdk-dbg-10.0 10.0.113-1.el9_8, dotnet-targeting-pack-10.0 10.0.13-1.el9_8, dotnet-templates-10.0 10.0.113-1.el9_8.",
   "date_published": "2026-10-13T19:01:30Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102870/fixed/nuget",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102870/",
   "title": "CVE-2026-102870 · Microsoft .NET 10.0 installed on Linux · fixed upstream (NuGet)",
   "content_text": "Fixed versions: Microsoft.AspNetCore.Components.WebAssembly.Server 10.0.13, Microsoft.AspNetCore.Components.WebAssembly.Server 11.0.0-rc.2.26478.115.",
   "date_published": "2026-10-13T19:01:30Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102870/fixed/rocky-linux-10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102870/",
   "title": "CVE-2026-102870 · Microsoft .NET 10.0 installed on Linux · fixed in Rocky Linux 10 (dotnet10.0 0:10.0.113-1.el10_2)",
   "content_text": "Fixed versions: dotnet10.0 0:10.0.113-1.el10_2.",
   "date_published": "2026-10-13T19:01:30Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102870/fixed/rocky-linux-8",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102870/",
   "title": "CVE-2026-102870 · Microsoft .NET 10.0 installed on Linux · fixed in Rocky Linux 8 (dotnet10.0 0:10.0.113-1.el8_10)",
   "content_text": "Fixed versions: dotnet10.0 0:10.0.113-1.el8_10.",
   "date_published": "2026-10-13T19:01:30Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102870/fixed/rocky-linux-9",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102870/",
   "title": "CVE-2026-102870 · Microsoft .NET 10.0 installed on Linux · fixed in Rocky Linux 9 (dotnet10.0 0:10.0.113-1.el9_8)",
   "content_text": "Fixed versions: dotnet10.0 0:10.0.113-1.el9_8.",
   "date_published": "2026-10-13T19:01:30Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102870/fixed/ubuntu-22.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102870/",
   "title": "CVE-2026-102870 · Microsoft .NET 10.0 installed on Linux · fixed in Ubuntu 22.04 LTS (dotnet8 8.0.132-8.0.32-0ubuntu1~22.04.1)",
   "content_text": "Fixed versions: dotnet8 8.0.132-8.0.32-0ubuntu1~22.04.1.",
   "date_published": "2026-10-13T19:01:30Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102870/fixed/ubuntu-24.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102870/",
   "title": "CVE-2026-102870 · Microsoft .NET 10.0 installed on Linux · fixed in Ubuntu 24.04 LTS (dotnet10 10.0.113-10.0.13-0ubuntu1~24.04.1 and 1 more)",
   "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~24.04.1, dotnet8 8.0.132-8.0.32-0ubuntu1~24.04.1.",
   "date_published": "2026-10-13T19:01:30Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102870/fixed/ubuntu-26.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102870/",
   "title": "CVE-2026-102870 · Microsoft .NET 10.0 installed on Linux · fixed in Ubuntu 26.04 LTS (dotnet10 10.0.113-10.0.13-0ubuntu1~26.04.1)",
   "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~26.04.1.",
   "date_published": "2026-10-13T19:01:30Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102870/fixed/ubuntu-26.10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102870/",
   "title": "CVE-2026-102870 · Microsoft .NET 10.0 installed on Linux · fixed in Ubuntu 26.10 (dotnet10 10.0.113-10.0.13-0ubuntu1~26.10.1 and 1 more)",
   "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~26.10.1, dotnet11 11.0.100-11.0.0~rc2-0ubuntu1~26.10.1.",
   "date_published": "2026-10-13T19:01:30Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-58280/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-58280/",
   "title": "CVE-2026-58280 · Microsoft .NET 10.0 runtime · disclosed",
   "content_text": "Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network.",
   "date_published": "2026-10-13T19:01:30Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-58280/fixed/almalinux-10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-58280/",
   "title": "CVE-2026-58280 · Microsoft .NET 10.0 runtime · fixed in AlmaLinux 10 (aspnetcore-runtime-10.0 10.0.13-1.el10_2 and 39 more)",
   "content_text": "Fixed versions: aspnetcore-runtime-10.0 10.0.13-1.el10_2, aspnetcore-runtime-8.0 8.0.32-1.el10_2, aspnetcore-runtime-9.0 9.0.21-1.el10_2, aspnetcore-runtime-dbg-10.0 10.0.13-1.el10_2, aspnetcore-runtime-dbg-8.0 8.0.32-1.el10_2, aspnetcore-runtime-dbg-9.0 9.0.21-1.el10_2, aspnetcore-targeting-pack-10.0 10.0.13-1.el10_2, aspnetcore-targeting-pack-8.0 8.0.32-1.el10_2, aspnetcore-targeting-pack-9.0 9.0.21-1.el10_2, dotnet-apphost-pack-10.0 10.0.13-1.el10_2, dotnet-apphost-pack-8.0 8.0.32-1.el10_2, dotnet-apphost-pack-9.0 9.0.21-1.el10_2, dotnet-host 10.0.13-1.el10_2, dotnet-hostfxr-10.0 10.0.13-1.el10_2, dotnet-hostfxr-8.0 8.0.32-1.el10_2, dotnet-hostfxr-9.0 9.0.21-1.el10_2, dotnet-runtime-10.0 10.0.13-1.el10_2, dotnet-runtime-8.0 8.0.32-1.el10_2, dotnet-runtime-9.0 9.0.21-1.el10_2, dotnet-runtime-dbg-10.0 10.0.13-1.el10_2, dotnet-runtime-dbg-8.0 8.0.32-1.el10_2, dotnet-runtime-dbg-9.0 9.0.21-1.el10_2, dotnet-sdk-10.0 10.0.113-1.el10_2, dotnet-sdk-10.0-source-built-artifacts 10.0.113-1.el10_2, dotnet-sdk-8.0 8.0.132-1.el10_2, dotnet-sdk-8.0-source-built-artifacts 8.0.132-1.el10_2, dotnet-sdk-9.0 9.0.122-1.el10_2, dotnet-sdk-9.0-source-built-artifacts 9.0.122-1.el10_2, dotnet-sdk-aot-10.0 10.0.113-1.el10_2, dotnet-sdk-aot-9.0 9.0.122-1.el10_2, dotnet-sdk-dbg-10.0 10.0.113-1.el10_2, dotnet-sdk-dbg-8.0 8.0.132-1.el10_2, dotnet-sdk-dbg-9.0 9.0.122-1.el10_2, dotnet-targeting-pack-10.0 10.0.13-1.el10_2, dotnet-targeting-pack-8.0 8.0.32-1.el10_2, dotnet-targeting-pack-9.0 9.0.21-1.el10_2, dotnet-templates-10.0 10.0.113-1.el10_2, dotnet-templates-8.0 8.0.132-1.el10_2, dotnet-templates-9.0 9.0.122-1.el10_2, netstandard-targeting-pack-2.1 9.0.122-1.el10_2.",
   "date_published": "2026-10-13T19:01:30Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-58280/fixed/almalinux-8",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-58280/",
   "title": "CVE-2026-58280 · Microsoft .NET 10.0 runtime · fixed in AlmaLinux 8 (aspnetcore-runtime-10.0 10.0.13-1.el8_10 and 39 more)",
   "content_text": "Fixed versions: aspnetcore-runtime-10.0 10.0.13-1.el8_10, aspnetcore-runtime-8.0 8.0.32-2.el8_10, aspnetcore-runtime-9.0 9.0.21-1.el8_10, aspnetcore-runtime-dbg-10.0 10.0.13-1.el8_10, aspnetcore-runtime-dbg-8.0 8.0.32-2.el8_10, aspnetcore-runtime-dbg-9.0 9.0.21-1.el8_10, aspnetcore-targeting-pack-10.0 10.0.13-1.el8_10, aspnetcore-targeting-pack-8.0 8.0.32-2.el8_10, aspnetcore-targeting-pack-9.0 9.0.21-1.el8_10, dotnet 10.0.113-1.el8_10, dotnet-apphost-pack-10.0 10.0.13-1.el8_10, dotnet-apphost-pack-8.0 8.0.32-2.el8_10, dotnet-apphost-pack-9.0 9.0.21-1.el8_10, dotnet-hostfxr-10.0 10.0.13-1.el8_10, dotnet-hostfxr-8.0 8.0.32-2.el8_10, dotnet-hostfxr-9.0 9.0.21-1.el8_10, dotnet-runtime-10.0 10.0.13-1.el8_10, dotnet-runtime-8.0 8.0.32-2.el8_10, dotnet-runtime-9.0 9.0.21-1.el8_10, dotnet-runtime-dbg-10.0 10.0.13-1.el8_10, dotnet-runtime-dbg-8.0 8.0.32-2.el8_10, dotnet-runtime-dbg-9.0 9.0.21-1.el8_10, dotnet-sdk-10.0 10.0.113-1.el8_10, dotnet-sdk-10.0-source-built-artifacts 10.0.113-1.el8_10, dotnet-sdk-8.0 8.0.132-2.el8_10, dotnet-sdk-8.0-source-built-artifacts 8.0.132-2.el8_10, dotnet-sdk-9.0 9.0.122-1.el8_10, dotnet-sdk-9.0-source-built-artifacts 9.0.122-1.el8_10, dotnet-sdk-aot-10.0 10.0.113-1.el8_10, dotnet-sdk-aot-9.0 9.0.122-1.el8_10, dotnet-sdk-dbg-10.0 10.0.113-1.el8_10, dotnet-sdk-dbg-8.0 8.0.132-2.el8_10, dotnet-sdk-dbg-9.0 9.0.122-1.el8_10, dotnet-targeting-pack-10.0 10.0.13-1.el8_10, dotnet-targeting-pack-8.0 8.0.32-2.el8_10, dotnet-targeting-pack-9.0 9.0.21-1.el8_10, dotnet-templates-10.0 10.0.113-1.el8_10, dotnet-templates-8.0 8.0.132-2.el8_10, dotnet-templates-9.0 9.0.122-1.el8_10, netstandard-targeting-pack-2.1 9.0.122-1.el8_10.",
   "date_published": "2026-10-13T19:01:30Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-58280/fixed/almalinux-9",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-58280/",
   "title": "CVE-2026-58280 · Microsoft .NET 10.0 runtime · fixed in AlmaLinux 9 (aspnetcore-runtime-10.0 10.0.13-1.el9_8 and 39 more)",
   "content_text": "Fixed versions: aspnetcore-runtime-10.0 10.0.13-1.el9_8, aspnetcore-runtime-8.0 8.0.32-1.el9_8, aspnetcore-runtime-9.0 9.0.21-1.el9_8, aspnetcore-runtime-dbg-10.0 10.0.13-1.el9_8, aspnetcore-runtime-dbg-8.0 8.0.32-1.el9_8, aspnetcore-runtime-dbg-9.0 9.0.21-1.el9_8, aspnetcore-targeting-pack-10.0 10.0.13-1.el9_8, aspnetcore-targeting-pack-8.0 8.0.32-1.el9_8, aspnetcore-targeting-pack-9.0 9.0.21-1.el9_8, dotnet-apphost-pack-10.0 10.0.13-1.el9_8, dotnet-apphost-pack-8.0 8.0.32-1.el9_8, dotnet-apphost-pack-9.0 9.0.21-1.el9_8, dotnet-host 10.0.13-1.el9_8, dotnet-hostfxr-10.0 10.0.13-1.el9_8, dotnet-hostfxr-8.0 8.0.32-1.el9_8, dotnet-hostfxr-9.0 9.0.21-1.el9_8, dotnet-runtime-10.0 10.0.13-1.el9_8, dotnet-runtime-8.0 8.0.32-1.el9_8, dotnet-runtime-9.0 9.0.21-1.el9_8, dotnet-runtime-dbg-10.0 10.0.13-1.el9_8, dotnet-runtime-dbg-8.0 8.0.32-1.el9_8, dotnet-runtime-dbg-9.0 9.0.21-1.el9_8, dotnet-sdk-10.0 10.0.113-1.el9_8, dotnet-sdk-10.0-source-built-artifacts 10.0.113-1.el9_8, dotnet-sdk-8.0 8.0.132-1.el9_8, dotnet-sdk-8.0-source-built-artifacts 8.0.132-1.el9_8, dotnet-sdk-9.0 9.0.122-1.el9_8, dotnet-sdk-9.0-source-built-artifacts 9.0.122-1.el9_8, dotnet-sdk-aot-10.0 10.0.113-1.el9_8, dotnet-sdk-aot-9.0 9.0.122-1.el9_8, dotnet-sdk-dbg-10.0 10.0.113-1.el9_8, dotnet-sdk-dbg-8.0 8.0.132-1.el9_8, dotnet-sdk-dbg-9.0 9.0.122-1.el9_8, dotnet-targeting-pack-10.0 10.0.13-1.el9_8, dotnet-targeting-pack-8.0 8.0.32-1.el9_8, dotnet-targeting-pack-9.0 9.0.21-1.el9_8, dotnet-templates-10.0 10.0.113-1.el9_8, dotnet-templates-8.0 8.0.132-1.el9_8, dotnet-templates-9.0 9.0.122-1.el9_8, netstandard-targeting-pack-2.1 9.0.122-1.el9_8.",
   "date_published": "2026-10-13T19:01:30Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-58280/fixed/nuget",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-58280/",
   "title": "CVE-2026-58280 · Microsoft .NET 10.0 runtime · fixed upstream (NuGet)",
   "content_text": "Fixed versions: Microsoft.NETCore.App.Runtime.linux-arm 10.0.13, Microsoft.NETCore.App.Runtime.linux-arm 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.linux-arm 8.0.32, Microsoft.NETCore.App.Runtime.linux-arm 9.0.21, Microsoft.NETCore.App.Runtime.linux-arm64 10.0.13, Microsoft.NETCore.App.Runtime.linux-arm64 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.linux-arm64 8.0.32, Microsoft.NETCore.App.Runtime.linux-arm64 9.0.21, Microsoft.NETCore.App.Runtime.linux-musl-arm 10.0.13, Microsoft.NETCore.App.Runtime.linux-musl-arm 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.linux-musl-arm 8.0.32, Microsoft.NETCore.App.Runtime.linux-musl-arm 9.0.21, Microsoft.NETCore.App.Runtime.linux-musl-arm64 10.0.13, Microsoft.NETCore.App.Runtime.linux-musl-arm64 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.linux-musl-arm64 8.0.32, Microsoft.NETCore.App.Runtime.linux-musl-arm64 9.0.21, Microsoft.NETCore.App.Runtime.linux-musl-x64 10.0.13, Microsoft.NETCore.App.Runtime.linux-musl-x64 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.linux-musl-x64 8.0.32, Microsoft.NETCore.App.Runtime.linux-musl-x64 9.0.21, Microsoft.NETCore.App.Runtime.linux-x64 10.0.13, Microsoft.NETCore.App.Runtime.linux-x64 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.linux-x64 8.0.32, Microsoft.NETCore.App.Runtime.linux-x64 9.0.21, Microsoft.NETCore.App.Runtime.osx-arm64 10.0.13, Microsoft.NETCore.App.Runtime.osx-arm64 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.osx-arm64 8.0.32, Microsoft.NETCore.App.Runtime.osx-arm64 9.0.21, Microsoft.NETCore.App.Runtime.osx-x64 10.0.13, Microsoft.NETCore.App.Runtime.osx-x64 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.osx-x64 8.0.32, Microsoft.NETCore.App.Runtime.osx-x64 9.0.21, Microsoft.NETCore.App.Runtime.win-arm 10.0.13, Microsoft.NETCore.App.Runtime.win-arm 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.win-arm 8.0.32, Microsoft.NETCore.App.Runtime.win-arm 9.0.21, Microsoft.NETCore.App.Runtime.win-arm64 10.0.13, Microsoft.NETCore.App.Runtime.win-arm64 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.win-arm64 8.0.32, Microsoft.NETCore.App.Runtime.win-arm64 9.0.21, Microsoft.NETCore.App.Runtime.win-x64 10.0.13, Microsoft.NETCore.App.Runtime.win-x64 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.win-x64 8.0.32, Microsoft.NETCore.App.Runtime.win-x64 9.0.21, Microsoft.NETCore.App.Runtime.win-x86 10.0.13, Microsoft.NETCore.App.Runtime.win-x86 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.win-x86 8.0.32, Microsoft.NETCore.App.Runtime.win-x86 9.0.21.",
   "date_published": "2026-10-13T19:01:30Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-58280/fixed/red-hat-hummingbird-1",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-58280/",
   "title": "CVE-2026-58280 · Microsoft .NET 10.0 runtime · fixed in Red Hat hummingbird 1 (aspnetcore-runtime-8.0 0:8.0.32-0.1.hum1 and 33 more)",
   "content_text": "Fixed versions: aspnetcore-runtime-8.0 0:8.0.32-0.1.hum1, aspnetcore-runtime-9.0 0:9.0.21-0.1.hum1, aspnetcore-runtime-dbg-8.0 0:8.0.32-0.1.hum1, aspnetcore-runtime-dbg-9.0 0:9.0.21-0.1.hum1, aspnetcore-targeting-pack-8.0 0:8.0.32-0.1.hum1, aspnetcore-targeting-pack-9.0 0:9.0.21-0.1.hum1, dotnet-apphost-pack-8.0 0:8.0.32-0.1.hum1, dotnet-apphost-pack-9.0 0:9.0.21-0.1.hum1, dotnet-hostfxr-8.0 0:8.0.32-0.1.hum1, dotnet-hostfxr-9.0 0:9.0.21-0.1.hum1, dotnet-runtime-8.0 0:8.0.32-0.1.hum1, dotnet-runtime-9.0 0:9.0.21-0.1.hum1, dotnet-runtime-dbg-8.0 0:8.0.32-0.1.hum1, dotnet-runtime-dbg-9.0 0:9.0.21-0.1.hum1, dotnet-sdk-10.0 0:10.0.113-1.hum1, dotnet-sdk-10.0-source-built-artifacts 0:10.0.113-1.hum1, dotnet-sdk-8.0 0:8.0.132-0.1.hum1, dotnet-sdk-8.0-source-built-artifacts 0:8.0.132-0.1.hum1, dotnet-sdk-9.0 0:9.0.122-0.1.hum1, dotnet-sdk-9.0-source-built-artifacts 0:9.0.122-0.1.hum1, dotnet-sdk-aot-10.0 0:10.0.113-1.hum1, dotnet-sdk-aot-9.0 0:9.0.122-0.1.hum1, dotnet-sdk-dbg-10.0 0:10.0.113-1.hum1, dotnet-sdk-dbg-8.0 0:8.0.132-0.1.hum1, dotnet-sdk-dbg-9.0 0:9.0.122-0.1.hum1, dotnet-targeting-pack-8.0 0:8.0.32-0.1.hum1, dotnet-targeting-pack-9.0 0:9.0.21-0.1.hum1, dotnet-templates-10.0 0:10.0.113-1.hum1, dotnet-templates-8.0 0:8.0.132-0.1.hum1, dotnet-templates-9.0 0:9.0.122-0.1.hum1, dotnet10.0 0:10.0.113-1.hum1, dotnet8.0 0:8.0.132-0.1.hum1, dotnet9.0 0:9.0.122-0.1.hum1, netstandard-targeting-pack-2.1 0:9.0.122-0.1.hum1.",
   "date_published": "2026-10-13T19:01:30Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-58280/fixed/rocky-linux-10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-58280/",
   "title": "CVE-2026-58280 · Microsoft .NET 10.0 runtime · fixed in Rocky Linux 10 (dotnet10.0 0:10.0.113-1.el10_2 and 2 more)",
   "content_text": "Fixed versions: dotnet10.0 0:10.0.113-1.el10_2, dotnet8.0 0:8.0.132-1.el10_2, dotnet9.0 0:9.0.122-1.el10_2.",
   "date_published": "2026-10-13T19:01:30Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-58280/fixed/rocky-linux-8",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-58280/",
   "title": "CVE-2026-58280 · Microsoft .NET 10.0 runtime · fixed in Rocky Linux 8 (dotnet10.0 0:10.0.113-1.el8_10 and 2 more)",
   "content_text": "Fixed versions: dotnet10.0 0:10.0.113-1.el8_10, dotnet8.0 0:8.0.132-2.el8_10, dotnet9.0 0:9.0.122-1.el8_10.",
   "date_published": "2026-10-13T19:01:30Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-58280/fixed/rocky-linux-9",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-58280/",
   "title": "CVE-2026-58280 · Microsoft .NET 10.0 runtime · fixed in Rocky Linux 9 (dotnet10.0 0:10.0.113-1.el9_8 and 2 more)",
   "content_text": "Fixed versions: dotnet10.0 0:10.0.113-1.el9_8, dotnet8.0 0:8.0.132-1.el9_8, dotnet9.0 0:9.0.122-1.el9_8.",
   "date_published": "2026-10-13T19:01:30Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-58280/fixed/ubuntu-22.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-58280/",
   "title": "CVE-2026-58280 · Microsoft .NET 10.0 runtime · fixed in Ubuntu 22.04 LTS (dotnet8 8.0.132-8.0.32-0ubuntu1~22.04.1)",
   "content_text": "Fixed versions: dotnet8 8.0.132-8.0.32-0ubuntu1~22.04.1.",
   "date_published": "2026-10-13T19:01:30Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-58280/fixed/ubuntu-24.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-58280/",
   "title": "CVE-2026-58280 · Microsoft .NET 10.0 runtime · fixed in Ubuntu 24.04 LTS (dotnet10 10.0.113-10.0.13-0ubuntu1~24.04.1 and 1 more)",
   "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~24.04.1, dotnet8 8.0.132-8.0.32-0ubuntu1~24.04.1.",
   "date_published": "2026-10-13T19:01:30Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-58280/fixed/ubuntu-26.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-58280/",
   "title": "CVE-2026-58280 · Microsoft .NET 10.0 runtime · fixed in Ubuntu 26.04 LTS (dotnet10 10.0.113-10.0.13-0ubuntu1~26.04.1)",
   "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~26.04.1.",
   "date_published": "2026-10-13T19:01:30Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-58280/fixed/ubuntu-26.10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-58280/",
   "title": "CVE-2026-58280 · Microsoft .NET 10.0 runtime · fixed in Ubuntu 26.10 (dotnet10 10.0.113-10.0.13-0ubuntu1~26.10.1 and 1 more)",
   "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~26.10.1, dotnet11 11.0.100-11.0.0~rc2-0ubuntu1~26.10.1.",
   "date_published": "2026-10-13T19:01:30Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96957/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96957/",
   "title": "CVE-2026-96957 · Microsoft .NET 10.0 runtime · disclosed",
   "content_text": "Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.",
   "date_published": "2026-10-13T19:01:27Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96957/fixed/almalinux-10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96957/",
   "title": "CVE-2026-96957 · Microsoft .NET 10.0 runtime · fixed in AlmaLinux 10 (aspnetcore-runtime-10.0 10.0.13-1.el10_2 and 13 more)",
   "content_text": "Fixed versions: aspnetcore-runtime-10.0 10.0.13-1.el10_2, aspnetcore-runtime-dbg-10.0 10.0.13-1.el10_2, aspnetcore-targeting-pack-10.0 10.0.13-1.el10_2, dotnet-apphost-pack-10.0 10.0.13-1.el10_2, dotnet-host 10.0.13-1.el10_2, dotnet-hostfxr-10.0 10.0.13-1.el10_2, dotnet-runtime-10.0 10.0.13-1.el10_2, dotnet-runtime-dbg-10.0 10.0.13-1.el10_2, dotnet-sdk-10.0 10.0.113-1.el10_2, dotnet-sdk-10.0-source-built-artifacts 10.0.113-1.el10_2, dotnet-sdk-aot-10.0 10.0.113-1.el10_2, dotnet-sdk-dbg-10.0 10.0.113-1.el10_2, dotnet-targeting-pack-10.0 10.0.13-1.el10_2, dotnet-templates-10.0 10.0.113-1.el10_2.",
   "date_published": "2026-10-13T19:01:27Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96957/fixed/almalinux-8",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96957/",
   "title": "CVE-2026-96957 · Microsoft .NET 10.0 runtime · fixed in AlmaLinux 8 (aspnetcore-runtime-10.0 10.0.13-1.el8_10 and 13 more)",
   "content_text": "Fixed versions: aspnetcore-runtime-10.0 10.0.13-1.el8_10, aspnetcore-runtime-dbg-10.0 10.0.13-1.el8_10, aspnetcore-targeting-pack-10.0 10.0.13-1.el8_10, dotnet 10.0.113-1.el8_10, dotnet-apphost-pack-10.0 10.0.13-1.el8_10, dotnet-hostfxr-10.0 10.0.13-1.el8_10, dotnet-runtime-10.0 10.0.13-1.el8_10, dotnet-runtime-dbg-10.0 10.0.13-1.el8_10, dotnet-sdk-10.0 10.0.113-1.el8_10, dotnet-sdk-10.0-source-built-artifacts 10.0.113-1.el8_10, dotnet-sdk-aot-10.0 10.0.113-1.el8_10, dotnet-sdk-dbg-10.0 10.0.113-1.el8_10, dotnet-targeting-pack-10.0 10.0.13-1.el8_10, dotnet-templates-10.0 10.0.113-1.el8_10.",
   "date_published": "2026-10-13T19:01:27Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96957/fixed/almalinux-9",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96957/",
   "title": "CVE-2026-96957 · Microsoft .NET 10.0 runtime · fixed in AlmaLinux 9 (aspnetcore-runtime-10.0 10.0.13-1.el9_8 and 13 more)",
   "content_text": "Fixed versions: aspnetcore-runtime-10.0 10.0.13-1.el9_8, aspnetcore-runtime-dbg-10.0 10.0.13-1.el9_8, aspnetcore-targeting-pack-10.0 10.0.13-1.el9_8, dotnet-apphost-pack-10.0 10.0.13-1.el9_8, dotnet-host 10.0.13-1.el9_8, dotnet-hostfxr-10.0 10.0.13-1.el9_8, dotnet-runtime-10.0 10.0.13-1.el9_8, dotnet-runtime-dbg-10.0 10.0.13-1.el9_8, dotnet-sdk-10.0 10.0.113-1.el9_8, dotnet-sdk-10.0-source-built-artifacts 10.0.113-1.el9_8, dotnet-sdk-aot-10.0 10.0.113-1.el9_8, dotnet-sdk-dbg-10.0 10.0.113-1.el9_8, dotnet-targeting-pack-10.0 10.0.13-1.el9_8, dotnet-templates-10.0 10.0.113-1.el9_8.",
   "date_published": "2026-10-13T19:01:27Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96957/fixed/red-hat-hummingbird-1",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96957/",
   "title": "CVE-2026-96957 · Microsoft .NET 10.0 runtime · fixed in Red Hat hummingbird 1 (dotnet-sdk-10.0 0:10.0.113-1.hum1 and 5 more)",
   "content_text": "Fixed versions: dotnet-sdk-10.0 0:10.0.113-1.hum1, dotnet-sdk-10.0-source-built-artifacts 0:10.0.113-1.hum1, dotnet-sdk-aot-10.0 0:10.0.113-1.hum1, dotnet-sdk-dbg-10.0 0:10.0.113-1.hum1, dotnet-templates-10.0 0:10.0.113-1.hum1, dotnet10.0 0:10.0.113-1.hum1.",
   "date_published": "2026-10-13T19:01:27Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96957/fixed/rocky-linux-10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96957/",
   "title": "CVE-2026-96957 · Microsoft .NET 10.0 runtime · fixed in Rocky Linux 10 (dotnet10.0 0:10.0.113-1.el10_2)",
   "content_text": "Fixed versions: dotnet10.0 0:10.0.113-1.el10_2.",
   "date_published": "2026-10-13T19:01:27Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96957/fixed/rocky-linux-8",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96957/",
   "title": "CVE-2026-96957 · Microsoft .NET 10.0 runtime · fixed in Rocky Linux 8 (dotnet10.0 0:10.0.113-1.el8_10)",
   "content_text": "Fixed versions: dotnet10.0 0:10.0.113-1.el8_10.",
   "date_published": "2026-10-13T19:01:27Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96957/fixed/rocky-linux-9",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96957/",
   "title": "CVE-2026-96957 · Microsoft .NET 10.0 runtime · fixed in Rocky Linux 9 (dotnet10.0 0:10.0.113-1.el9_8)",
   "content_text": "Fixed versions: dotnet10.0 0:10.0.113-1.el9_8.",
   "date_published": "2026-10-13T19:01:27Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96957/fixed/ubuntu-22.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96957/",
   "title": "CVE-2026-96957 · Microsoft .NET 10.0 runtime · fixed in Ubuntu 22.04 LTS (dotnet8 8.0.132-8.0.32-0ubuntu1~22.04.1)",
   "content_text": "Fixed versions: dotnet8 8.0.132-8.0.32-0ubuntu1~22.04.1.",
   "date_published": "2026-10-13T19:01:27Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96957/fixed/ubuntu-24.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96957/",
   "title": "CVE-2026-96957 · Microsoft .NET 10.0 runtime · fixed in Ubuntu 24.04 LTS (dotnet10 10.0.113-10.0.13-0ubuntu1~24.04.1 and 1 more)",
   "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~24.04.1, dotnet8 8.0.132-8.0.32-0ubuntu1~24.04.1.",
   "date_published": "2026-10-13T19:01:27Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96957/fixed/ubuntu-26.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96957/",
   "title": "CVE-2026-96957 · Microsoft .NET 10.0 runtime · fixed in Ubuntu 26.04 LTS (dotnet10 10.0.113-10.0.13-0ubuntu1~26.04.1)",
   "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~26.04.1.",
   "date_published": "2026-10-13T19:01:27Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96957/fixed/ubuntu-26.10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96957/",
   "title": "CVE-2026-96957 · Microsoft .NET 10.0 runtime · fixed in Ubuntu 26.10 (dotnet10 10.0.113-10.0.13-0ubuntu1~26.10.1 and 1 more)",
   "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~26.10.1, dotnet11 11.0.100-11.0.0~rc2-0ubuntu1~26.10.1.",
   "date_published": "2026-10-13T19:01:27Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96238/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96238/",
   "title": "CVE-2026-96238 · Microsoft .NET 10.0 runtime · disclosed",
   "content_text": "Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network.",
   "date_published": "2026-10-13T19:01:16Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96238/fixed/almalinux-10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96238/",
   "title": "CVE-2026-96238 · Microsoft .NET 10.0 runtime · fixed in AlmaLinux 10 (aspnetcore-runtime-10.0 10.0.13-1.el10_2 and 39 more)",
   "content_text": "Fixed versions: aspnetcore-runtime-10.0 10.0.13-1.el10_2, aspnetcore-runtime-8.0 8.0.32-1.el10_2, aspnetcore-runtime-9.0 9.0.21-1.el10_2, aspnetcore-runtime-dbg-10.0 10.0.13-1.el10_2, aspnetcore-runtime-dbg-8.0 8.0.32-1.el10_2, aspnetcore-runtime-dbg-9.0 9.0.21-1.el10_2, aspnetcore-targeting-pack-10.0 10.0.13-1.el10_2, aspnetcore-targeting-pack-8.0 8.0.32-1.el10_2, aspnetcore-targeting-pack-9.0 9.0.21-1.el10_2, dotnet-apphost-pack-10.0 10.0.13-1.el10_2, dotnet-apphost-pack-8.0 8.0.32-1.el10_2, dotnet-apphost-pack-9.0 9.0.21-1.el10_2, dotnet-host 10.0.13-1.el10_2, dotnet-hostfxr-10.0 10.0.13-1.el10_2, dotnet-hostfxr-8.0 8.0.32-1.el10_2, dotnet-hostfxr-9.0 9.0.21-1.el10_2, dotnet-runtime-10.0 10.0.13-1.el10_2, dotnet-runtime-8.0 8.0.32-1.el10_2, dotnet-runtime-9.0 9.0.21-1.el10_2, dotnet-runtime-dbg-10.0 10.0.13-1.el10_2, dotnet-runtime-dbg-8.0 8.0.32-1.el10_2, dotnet-runtime-dbg-9.0 9.0.21-1.el10_2, dotnet-sdk-10.0 10.0.113-1.el10_2, dotnet-sdk-10.0-source-built-artifacts 10.0.113-1.el10_2, dotnet-sdk-8.0 8.0.132-1.el10_2, dotnet-sdk-8.0-source-built-artifacts 8.0.132-1.el10_2, dotnet-sdk-9.0 9.0.122-1.el10_2, dotnet-sdk-9.0-source-built-artifacts 9.0.122-1.el10_2, dotnet-sdk-aot-10.0 10.0.113-1.el10_2, dotnet-sdk-aot-9.0 9.0.122-1.el10_2, dotnet-sdk-dbg-10.0 10.0.113-1.el10_2, dotnet-sdk-dbg-8.0 8.0.132-1.el10_2, dotnet-sdk-dbg-9.0 9.0.122-1.el10_2, dotnet-targeting-pack-10.0 10.0.13-1.el10_2, dotnet-targeting-pack-8.0 8.0.32-1.el10_2, dotnet-targeting-pack-9.0 9.0.21-1.el10_2, dotnet-templates-10.0 10.0.113-1.el10_2, dotnet-templates-8.0 8.0.132-1.el10_2, dotnet-templates-9.0 9.0.122-1.el10_2, netstandard-targeting-pack-2.1 9.0.122-1.el10_2.",
   "date_published": "2026-10-13T19:01:16Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96238/fixed/almalinux-8",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96238/",
   "title": "CVE-2026-96238 · Microsoft .NET 10.0 runtime · fixed in AlmaLinux 8 (aspnetcore-runtime-10.0 10.0.13-1.el8_10 and 39 more)",
   "content_text": "Fixed versions: aspnetcore-runtime-10.0 10.0.13-1.el8_10, aspnetcore-runtime-8.0 8.0.32-2.el8_10, aspnetcore-runtime-9.0 9.0.21-1.el8_10, aspnetcore-runtime-dbg-10.0 10.0.13-1.el8_10, aspnetcore-runtime-dbg-8.0 8.0.32-2.el8_10, aspnetcore-runtime-dbg-9.0 9.0.21-1.el8_10, aspnetcore-targeting-pack-10.0 10.0.13-1.el8_10, aspnetcore-targeting-pack-8.0 8.0.32-2.el8_10, aspnetcore-targeting-pack-9.0 9.0.21-1.el8_10, dotnet 10.0.113-1.el8_10, dotnet-apphost-pack-10.0 10.0.13-1.el8_10, dotnet-apphost-pack-8.0 8.0.32-2.el8_10, dotnet-apphost-pack-9.0 9.0.21-1.el8_10, dotnet-hostfxr-10.0 10.0.13-1.el8_10, dotnet-hostfxr-8.0 8.0.32-2.el8_10, dotnet-hostfxr-9.0 9.0.21-1.el8_10, dotnet-runtime-10.0 10.0.13-1.el8_10, dotnet-runtime-8.0 8.0.32-2.el8_10, dotnet-runtime-9.0 9.0.21-1.el8_10, dotnet-runtime-dbg-10.0 10.0.13-1.el8_10, dotnet-runtime-dbg-8.0 8.0.32-2.el8_10, dotnet-runtime-dbg-9.0 9.0.21-1.el8_10, dotnet-sdk-10.0 10.0.113-1.el8_10, dotnet-sdk-10.0-source-built-artifacts 10.0.113-1.el8_10, dotnet-sdk-8.0 8.0.132-2.el8_10, dotnet-sdk-8.0-source-built-artifacts 8.0.132-2.el8_10, dotnet-sdk-9.0 9.0.122-1.el8_10, dotnet-sdk-9.0-source-built-artifacts 9.0.122-1.el8_10, dotnet-sdk-aot-10.0 10.0.113-1.el8_10, dotnet-sdk-aot-9.0 9.0.122-1.el8_10, dotnet-sdk-dbg-10.0 10.0.113-1.el8_10, dotnet-sdk-dbg-8.0 8.0.132-2.el8_10, dotnet-sdk-dbg-9.0 9.0.122-1.el8_10, dotnet-targeting-pack-10.0 10.0.13-1.el8_10, dotnet-targeting-pack-8.0 8.0.32-2.el8_10, dotnet-targeting-pack-9.0 9.0.21-1.el8_10, dotnet-templates-10.0 10.0.113-1.el8_10, dotnet-templates-8.0 8.0.132-2.el8_10, dotnet-templates-9.0 9.0.122-1.el8_10, netstandard-targeting-pack-2.1 9.0.122-1.el8_10.",
   "date_published": "2026-10-13T19:01:16Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96238/fixed/almalinux-9",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96238/",
   "title": "CVE-2026-96238 · Microsoft .NET 10.0 runtime · fixed in AlmaLinux 9 (aspnetcore-runtime-10.0 10.0.13-1.el9_8 and 39 more)",
   "content_text": "Fixed versions: aspnetcore-runtime-10.0 10.0.13-1.el9_8, aspnetcore-runtime-8.0 8.0.32-1.el9_8, aspnetcore-runtime-9.0 9.0.21-1.el9_8, aspnetcore-runtime-dbg-10.0 10.0.13-1.el9_8, aspnetcore-runtime-dbg-8.0 8.0.32-1.el9_8, aspnetcore-runtime-dbg-9.0 9.0.21-1.el9_8, aspnetcore-targeting-pack-10.0 10.0.13-1.el9_8, aspnetcore-targeting-pack-8.0 8.0.32-1.el9_8, aspnetcore-targeting-pack-9.0 9.0.21-1.el9_8, dotnet-apphost-pack-10.0 10.0.13-1.el9_8, dotnet-apphost-pack-8.0 8.0.32-1.el9_8, dotnet-apphost-pack-9.0 9.0.21-1.el9_8, dotnet-host 10.0.13-1.el9_8, dotnet-hostfxr-10.0 10.0.13-1.el9_8, dotnet-hostfxr-8.0 8.0.32-1.el9_8, dotnet-hostfxr-9.0 9.0.21-1.el9_8, dotnet-runtime-10.0 10.0.13-1.el9_8, dotnet-runtime-8.0 8.0.32-1.el9_8, dotnet-runtime-9.0 9.0.21-1.el9_8, dotnet-runtime-dbg-10.0 10.0.13-1.el9_8, dotnet-runtime-dbg-8.0 8.0.32-1.el9_8, dotnet-runtime-dbg-9.0 9.0.21-1.el9_8, dotnet-sdk-10.0 10.0.113-1.el9_8, dotnet-sdk-10.0-source-built-artifacts 10.0.113-1.el9_8, dotnet-sdk-8.0 8.0.132-1.el9_8, dotnet-sdk-8.0-source-built-artifacts 8.0.132-1.el9_8, dotnet-sdk-9.0 9.0.122-1.el9_8, dotnet-sdk-9.0-source-built-artifacts 9.0.122-1.el9_8, dotnet-sdk-aot-10.0 10.0.113-1.el9_8, dotnet-sdk-aot-9.0 9.0.122-1.el9_8, dotnet-sdk-dbg-10.0 10.0.113-1.el9_8, dotnet-sdk-dbg-8.0 8.0.132-1.el9_8, dotnet-sdk-dbg-9.0 9.0.122-1.el9_8, dotnet-targeting-pack-10.0 10.0.13-1.el9_8, dotnet-targeting-pack-8.0 8.0.32-1.el9_8, dotnet-targeting-pack-9.0 9.0.21-1.el9_8, dotnet-templates-10.0 10.0.113-1.el9_8, dotnet-templates-8.0 8.0.132-1.el9_8, dotnet-templates-9.0 9.0.122-1.el9_8, netstandard-targeting-pack-2.1 9.0.122-1.el9_8.",
   "date_published": "2026-10-13T19:01:16Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96238/fixed/rocky-linux-10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96238/",
   "title": "CVE-2026-96238 · Microsoft .NET 10.0 runtime · fixed in Rocky Linux 10 (dotnet10.0 0:10.0.113-1.el10_2 and 2 more)",
   "content_text": "Fixed versions: dotnet10.0 0:10.0.113-1.el10_2, dotnet8.0 0:8.0.132-1.el10_2, dotnet9.0 0:9.0.122-1.el10_2.",
   "date_published": "2026-10-13T19:01:16Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96238/fixed/rocky-linux-8",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96238/",
   "title": "CVE-2026-96238 · Microsoft .NET 10.0 runtime · fixed in Rocky Linux 8 (dotnet10.0 0:10.0.113-1.el8_10 and 2 more)",
   "content_text": "Fixed versions: dotnet10.0 0:10.0.113-1.el8_10, dotnet8.0 0:8.0.132-2.el8_10, dotnet9.0 0:9.0.122-1.el8_10.",
   "date_published": "2026-10-13T19:01:16Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96238/fixed/rocky-linux-9",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96238/",
   "title": "CVE-2026-96238 · Microsoft .NET 10.0 runtime · fixed in Rocky Linux 9 (dotnet10.0 0:10.0.113-1.el9_8 and 2 more)",
   "content_text": "Fixed versions: dotnet10.0 0:10.0.113-1.el9_8, dotnet8.0 0:8.0.132-1.el9_8, dotnet9.0 0:9.0.122-1.el9_8.",
   "date_published": "2026-10-13T19:01:16Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96238/fixed/ubuntu-22.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96238/",
   "title": "CVE-2026-96238 · Microsoft .NET 10.0 runtime · fixed in Ubuntu 22.04 LTS (dotnet8 8.0.132-8.0.32-0ubuntu1~22.04.1)",
   "content_text": "Fixed versions: dotnet8 8.0.132-8.0.32-0ubuntu1~22.04.1.",
   "date_published": "2026-10-13T19:01:16Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96238/fixed/ubuntu-24.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96238/",
   "title": "CVE-2026-96238 · Microsoft .NET 10.0 runtime · fixed in Ubuntu 24.04 LTS (dotnet10 10.0.113-10.0.13-0ubuntu1~24.04.1 and 1 more)",
   "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~24.04.1, dotnet8 8.0.132-8.0.32-0ubuntu1~24.04.1.",
   "date_published": "2026-10-13T19:01:16Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96238/fixed/ubuntu-26.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96238/",
   "title": "CVE-2026-96238 · Microsoft .NET 10.0 runtime · fixed in Ubuntu 26.04 LTS (dotnet10 10.0.113-10.0.13-0ubuntu1~26.04.1)",
   "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~26.04.1.",
   "date_published": "2026-10-13T19:01:16Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96238/fixed/ubuntu-26.10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96238/",
   "title": "CVE-2026-96238 · Microsoft .NET 10.0 runtime · fixed in Ubuntu 26.10 (dotnet10 10.0.113-10.0.13-0ubuntu1~26.10.1 and 1 more)",
   "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~26.10.1, dotnet11 11.0.100-11.0.0~rc2-0ubuntu1~26.10.1.",
   "date_published": "2026-10-13T19:01:16Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96237/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96237/",
   "title": "CVE-2026-96237 · Microsoft .NET 10.0 runtime · disclosed",
   "content_text": "Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network.",
   "date_published": "2026-10-13T19:01:16Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96237/fixed/almalinux-10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96237/",
   "title": "CVE-2026-96237 · Microsoft .NET 10.0 runtime · fixed in AlmaLinux 10 (aspnetcore-runtime-10.0 10.0.13-1.el10_2 and 39 more)",
   "content_text": "Fixed versions: aspnetcore-runtime-10.0 10.0.13-1.el10_2, aspnetcore-runtime-8.0 8.0.32-1.el10_2, aspnetcore-runtime-9.0 9.0.21-1.el10_2, aspnetcore-runtime-dbg-10.0 10.0.13-1.el10_2, aspnetcore-runtime-dbg-8.0 8.0.32-1.el10_2, aspnetcore-runtime-dbg-9.0 9.0.21-1.el10_2, aspnetcore-targeting-pack-10.0 10.0.13-1.el10_2, aspnetcore-targeting-pack-8.0 8.0.32-1.el10_2, aspnetcore-targeting-pack-9.0 9.0.21-1.el10_2, dotnet-apphost-pack-10.0 10.0.13-1.el10_2, dotnet-apphost-pack-8.0 8.0.32-1.el10_2, dotnet-apphost-pack-9.0 9.0.21-1.el10_2, dotnet-host 10.0.13-1.el10_2, dotnet-hostfxr-10.0 10.0.13-1.el10_2, dotnet-hostfxr-8.0 8.0.32-1.el10_2, dotnet-hostfxr-9.0 9.0.21-1.el10_2, dotnet-runtime-10.0 10.0.13-1.el10_2, dotnet-runtime-8.0 8.0.32-1.el10_2, dotnet-runtime-9.0 9.0.21-1.el10_2, dotnet-runtime-dbg-10.0 10.0.13-1.el10_2, dotnet-runtime-dbg-8.0 8.0.32-1.el10_2, dotnet-runtime-dbg-9.0 9.0.21-1.el10_2, dotnet-sdk-10.0 10.0.113-1.el10_2, dotnet-sdk-10.0-source-built-artifacts 10.0.113-1.el10_2, dotnet-sdk-8.0 8.0.132-1.el10_2, dotnet-sdk-8.0-source-built-artifacts 8.0.132-1.el10_2, dotnet-sdk-9.0 9.0.122-1.el10_2, dotnet-sdk-9.0-source-built-artifacts 9.0.122-1.el10_2, dotnet-sdk-aot-10.0 10.0.113-1.el10_2, dotnet-sdk-aot-9.0 9.0.122-1.el10_2, dotnet-sdk-dbg-10.0 10.0.113-1.el10_2, dotnet-sdk-dbg-8.0 8.0.132-1.el10_2, dotnet-sdk-dbg-9.0 9.0.122-1.el10_2, dotnet-targeting-pack-10.0 10.0.13-1.el10_2, dotnet-targeting-pack-8.0 8.0.32-1.el10_2, dotnet-targeting-pack-9.0 9.0.21-1.el10_2, dotnet-templates-10.0 10.0.113-1.el10_2, dotnet-templates-8.0 8.0.132-1.el10_2, dotnet-templates-9.0 9.0.122-1.el10_2, netstandard-targeting-pack-2.1 9.0.122-1.el10_2.",
   "date_published": "2026-10-13T19:01:16Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96237/fixed/almalinux-8",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96237/",
   "title": "CVE-2026-96237 · Microsoft .NET 10.0 runtime · fixed in AlmaLinux 8 (aspnetcore-runtime-10.0 10.0.13-1.el8_10 and 39 more)",
   "content_text": "Fixed versions: aspnetcore-runtime-10.0 10.0.13-1.el8_10, aspnetcore-runtime-8.0 8.0.32-2.el8_10, aspnetcore-runtime-9.0 9.0.21-1.el8_10, aspnetcore-runtime-dbg-10.0 10.0.13-1.el8_10, aspnetcore-runtime-dbg-8.0 8.0.32-2.el8_10, aspnetcore-runtime-dbg-9.0 9.0.21-1.el8_10, aspnetcore-targeting-pack-10.0 10.0.13-1.el8_10, aspnetcore-targeting-pack-8.0 8.0.32-2.el8_10, aspnetcore-targeting-pack-9.0 9.0.21-1.el8_10, dotnet 10.0.113-1.el8_10, dotnet-apphost-pack-10.0 10.0.13-1.el8_10, dotnet-apphost-pack-8.0 8.0.32-2.el8_10, dotnet-apphost-pack-9.0 9.0.21-1.el8_10, dotnet-hostfxr-10.0 10.0.13-1.el8_10, dotnet-hostfxr-8.0 8.0.32-2.el8_10, dotnet-hostfxr-9.0 9.0.21-1.el8_10, dotnet-runtime-10.0 10.0.13-1.el8_10, dotnet-runtime-8.0 8.0.32-2.el8_10, dotnet-runtime-9.0 9.0.21-1.el8_10, dotnet-runtime-dbg-10.0 10.0.13-1.el8_10, dotnet-runtime-dbg-8.0 8.0.32-2.el8_10, dotnet-runtime-dbg-9.0 9.0.21-1.el8_10, dotnet-sdk-10.0 10.0.113-1.el8_10, dotnet-sdk-10.0-source-built-artifacts 10.0.113-1.el8_10, dotnet-sdk-8.0 8.0.132-2.el8_10, dotnet-sdk-8.0-source-built-artifacts 8.0.132-2.el8_10, dotnet-sdk-9.0 9.0.122-1.el8_10, dotnet-sdk-9.0-source-built-artifacts 9.0.122-1.el8_10, dotnet-sdk-aot-10.0 10.0.113-1.el8_10, dotnet-sdk-aot-9.0 9.0.122-1.el8_10, dotnet-sdk-dbg-10.0 10.0.113-1.el8_10, dotnet-sdk-dbg-8.0 8.0.132-2.el8_10, dotnet-sdk-dbg-9.0 9.0.122-1.el8_10, dotnet-targeting-pack-10.0 10.0.13-1.el8_10, dotnet-targeting-pack-8.0 8.0.32-2.el8_10, dotnet-targeting-pack-9.0 9.0.21-1.el8_10, dotnet-templates-10.0 10.0.113-1.el8_10, dotnet-templates-8.0 8.0.132-2.el8_10, dotnet-templates-9.0 9.0.122-1.el8_10, netstandard-targeting-pack-2.1 9.0.122-1.el8_10.",
   "date_published": "2026-10-13T19:01:16Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96237/fixed/almalinux-9",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96237/",
   "title": "CVE-2026-96237 · Microsoft .NET 10.0 runtime · fixed in AlmaLinux 9 (aspnetcore-runtime-10.0 10.0.13-1.el9_8 and 39 more)",
   "content_text": "Fixed versions: aspnetcore-runtime-10.0 10.0.13-1.el9_8, aspnetcore-runtime-8.0 8.0.32-1.el9_8, aspnetcore-runtime-9.0 9.0.21-1.el9_8, aspnetcore-runtime-dbg-10.0 10.0.13-1.el9_8, aspnetcore-runtime-dbg-8.0 8.0.32-1.el9_8, aspnetcore-runtime-dbg-9.0 9.0.21-1.el9_8, aspnetcore-targeting-pack-10.0 10.0.13-1.el9_8, aspnetcore-targeting-pack-8.0 8.0.32-1.el9_8, aspnetcore-targeting-pack-9.0 9.0.21-1.el9_8, dotnet-apphost-pack-10.0 10.0.13-1.el9_8, dotnet-apphost-pack-8.0 8.0.32-1.el9_8, dotnet-apphost-pack-9.0 9.0.21-1.el9_8, dotnet-host 10.0.13-1.el9_8, dotnet-hostfxr-10.0 10.0.13-1.el9_8, dotnet-hostfxr-8.0 8.0.32-1.el9_8, dotnet-hostfxr-9.0 9.0.21-1.el9_8, dotnet-runtime-10.0 10.0.13-1.el9_8, dotnet-runtime-8.0 8.0.32-1.el9_8, dotnet-runtime-9.0 9.0.21-1.el9_8, dotnet-runtime-dbg-10.0 10.0.13-1.el9_8, dotnet-runtime-dbg-8.0 8.0.32-1.el9_8, dotnet-runtime-dbg-9.0 9.0.21-1.el9_8, dotnet-sdk-10.0 10.0.113-1.el9_8, dotnet-sdk-10.0-source-built-artifacts 10.0.113-1.el9_8, dotnet-sdk-8.0 8.0.132-1.el9_8, dotnet-sdk-8.0-source-built-artifacts 8.0.132-1.el9_8, dotnet-sdk-9.0 9.0.122-1.el9_8, dotnet-sdk-9.0-source-built-artifacts 9.0.122-1.el9_8, dotnet-sdk-aot-10.0 10.0.113-1.el9_8, dotnet-sdk-aot-9.0 9.0.122-1.el9_8, dotnet-sdk-dbg-10.0 10.0.113-1.el9_8, dotnet-sdk-dbg-8.0 8.0.132-1.el9_8, dotnet-sdk-dbg-9.0 9.0.122-1.el9_8, dotnet-targeting-pack-10.0 10.0.13-1.el9_8, dotnet-targeting-pack-8.0 8.0.32-1.el9_8, dotnet-targeting-pack-9.0 9.0.21-1.el9_8, dotnet-templates-10.0 10.0.113-1.el9_8, dotnet-templates-8.0 8.0.132-1.el9_8, dotnet-templates-9.0 9.0.122-1.el9_8, netstandard-targeting-pack-2.1 9.0.122-1.el9_8.",
   "date_published": "2026-10-13T19:01:16Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96237/fixed/rocky-linux-10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96237/",
   "title": "CVE-2026-96237 · Microsoft .NET 10.0 runtime · fixed in Rocky Linux 10 (dotnet10.0 0:10.0.113-1.el10_2 and 2 more)",
   "content_text": "Fixed versions: dotnet10.0 0:10.0.113-1.el10_2, dotnet8.0 0:8.0.132-1.el10_2, dotnet9.0 0:9.0.122-1.el10_2.",
   "date_published": "2026-10-13T19:01:16Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96237/fixed/rocky-linux-8",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96237/",
   "title": "CVE-2026-96237 · Microsoft .NET 10.0 runtime · fixed in Rocky Linux 8 (dotnet10.0 0:10.0.113-1.el8_10 and 2 more)",
   "content_text": "Fixed versions: dotnet10.0 0:10.0.113-1.el8_10, dotnet8.0 0:8.0.132-2.el8_10, dotnet9.0 0:9.0.122-1.el8_10.",
   "date_published": "2026-10-13T19:01:16Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96237/fixed/rocky-linux-9",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96237/",
   "title": "CVE-2026-96237 · Microsoft .NET 10.0 runtime · fixed in Rocky Linux 9 (dotnet10.0 0:10.0.113-1.el9_8 and 2 more)",
   "content_text": "Fixed versions: dotnet10.0 0:10.0.113-1.el9_8, dotnet8.0 0:8.0.132-1.el9_8, dotnet9.0 0:9.0.122-1.el9_8.",
   "date_published": "2026-10-13T19:01:16Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96237/fixed/ubuntu-22.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96237/",
   "title": "CVE-2026-96237 · Microsoft .NET 10.0 runtime · fixed in Ubuntu 22.04 LTS (dotnet8 8.0.132-8.0.32-0ubuntu1~22.04.1)",
   "content_text": "Fixed versions: dotnet8 8.0.132-8.0.32-0ubuntu1~22.04.1.",
   "date_published": "2026-10-13T19:01:16Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96237/fixed/ubuntu-24.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96237/",
   "title": "CVE-2026-96237 · Microsoft .NET 10.0 runtime · fixed in Ubuntu 24.04 LTS (dotnet10 10.0.113-10.0.13-0ubuntu1~24.04.1 and 1 more)",
   "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~24.04.1, dotnet8 8.0.132-8.0.32-0ubuntu1~24.04.1.",
   "date_published": "2026-10-13T19:01:16Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96237/fixed/ubuntu-26.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96237/",
   "title": "CVE-2026-96237 · Microsoft .NET 10.0 runtime · fixed in Ubuntu 26.04 LTS (dotnet10 10.0.113-10.0.13-0ubuntu1~26.04.1)",
   "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~26.04.1.",
   "date_published": "2026-10-13T19:01:16Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96237/fixed/ubuntu-26.10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96237/",
   "title": "CVE-2026-96237 · Microsoft .NET 10.0 runtime · fixed in Ubuntu 26.10 (dotnet10 10.0.113-10.0.13-0ubuntu1~26.10.1 and 1 more)",
   "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~26.10.1, dotnet11 11.0.100-11.0.0~rc2-0ubuntu1~26.10.1.",
   "date_published": "2026-10-13T19:01:16Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96235/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96235/",
   "title": "CVE-2026-96235 · Microsoft .NET 10.0 runtime · disclosed",
   "content_text": "Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.",
   "date_published": "2026-10-13T19:01:16Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96235/fixed/nuget",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96235/",
   "title": "CVE-2026-96235 · Microsoft .NET 10.0 runtime · fixed upstream (NuGet)",
   "content_text": "Fixed versions: Microsoft.WindowsDesktop.App.Runtime.win-arm64 10.0.13, Microsoft.WindowsDesktop.App.Runtime.win-arm64 11.0.0-rc.2, Microsoft.WindowsDesktop.App.Runtime.win-arm64 8.0.32, Microsoft.WindowsDesktop.App.Runtime.win-arm64 9.0.21, Microsoft.WindowsDesktop.App.Runtime.win-x64 10.0.13, Microsoft.WindowsDesktop.App.Runtime.win-x64 11.0.0-rc.2, Microsoft.WindowsDesktop.App.Runtime.win-x64 8.0.32, Microsoft.WindowsDesktop.App.Runtime.win-x64 9.0.21, Microsoft.WindowsDesktop.App.Runtime.win-x86 10.0.13, Microsoft.WindowsDesktop.App.Runtime.win-x86 11.0.0-rc.2, Microsoft.WindowsDesktop.App.Runtime.win-x86 8.0.32, Microsoft.WindowsDesktop.App.Runtime.win-x86 9.0.21.",
   "date_published": "2026-10-13T19:01:16Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96234/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96234/",
   "title": "CVE-2026-96234 · Microsoft .NET 10.0 runtime · disclosed",
   "content_text": "Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.",
   "date_published": "2026-10-13T19:01:16Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96234/fixed/nuget",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96234/",
   "title": "CVE-2026-96234 · Microsoft .NET 10.0 runtime · fixed upstream (NuGet)",
   "content_text": "Fixed versions: Microsoft.WindowsDesktop.App.Runtime.win-arm64 10.0.13, Microsoft.WindowsDesktop.App.Runtime.win-arm64 11.0.0-rc.2, Microsoft.WindowsDesktop.App.Runtime.win-arm64 8.0.32, Microsoft.WindowsDesktop.App.Runtime.win-arm64 9.0.21, Microsoft.WindowsDesktop.App.Runtime.win-x64 10.0.13, Microsoft.WindowsDesktop.App.Runtime.win-x64 11.0.0-rc.2, Microsoft.WindowsDesktop.App.Runtime.win-x64 8.0.32, Microsoft.WindowsDesktop.App.Runtime.win-x64 9.0.21, Microsoft.WindowsDesktop.App.Runtime.win-x86 10.0.13, Microsoft.WindowsDesktop.App.Runtime.win-x86 11.0.0-rc.2, Microsoft.WindowsDesktop.App.Runtime.win-x86 8.0.32, Microsoft.WindowsDesktop.App.Runtime.win-x86 9.0.21.",
   "date_published": "2026-10-13T19:01:16Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96232/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96232/",
   "title": "CVE-2026-96232 · Microsoft .NET 10.0 runtime · disclosed",
   "content_text": "Out-of-bounds read in .NET allows an unauthorized attacker to disclose information over a network.",
   "date_published": "2026-10-13T19:01:16Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96232/fixed/nuget",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96232/",
   "title": "CVE-2026-96232 · Microsoft .NET 10.0 runtime · fixed upstream (NuGet)",
   "content_text": "Fixed versions: Microsoft.WindowsDesktop.App.Runtime.win-arm64 10.0.13, Microsoft.WindowsDesktop.App.Runtime.win-arm64 11.0.0-rc.2, Microsoft.WindowsDesktop.App.Runtime.win-arm64 8.0.32, Microsoft.WindowsDesktop.App.Runtime.win-arm64 9.0.21, Microsoft.WindowsDesktop.App.Runtime.win-x64 10.0.13, Microsoft.WindowsDesktop.App.Runtime.win-x64 11.0.0-rc.2, Microsoft.WindowsDesktop.App.Runtime.win-x64 8.0.32, Microsoft.WindowsDesktop.App.Runtime.win-x64 9.0.21, Microsoft.WindowsDesktop.App.Runtime.win-x86 10.0.13, Microsoft.WindowsDesktop.App.Runtime.win-x86 11.0.0-rc.2, Microsoft.WindowsDesktop.App.Runtime.win-x86 8.0.32, Microsoft.WindowsDesktop.App.Runtime.win-x86 9.0.21.",
   "date_published": "2026-10-13T19:01:16Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96230/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96230/",
   "title": "CVE-2026-96230 · Microsoft Visual Studio 2022 version 17.14 · disclosed",
   "content_text": "Improper neutralization of input during web page generation ('cross-site scripting') in ASP.NET Core allows an unauthorized attacker to execute code over a network.",
   "date_published": "2026-10-13T19:01:16Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96230/fixed/almalinux-10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96230/",
   "title": "CVE-2026-96230 · Microsoft Visual Studio 2022 version 17.14 · fixed in AlmaLinux 10 (aspnetcore-runtime-10.0 10.0.13-1.el10_2 and 39 more)",
   "content_text": "Fixed versions: aspnetcore-runtime-10.0 10.0.13-1.el10_2, aspnetcore-runtime-8.0 8.0.32-1.el10_2, aspnetcore-runtime-9.0 9.0.21-1.el10_2, aspnetcore-runtime-dbg-10.0 10.0.13-1.el10_2, aspnetcore-runtime-dbg-8.0 8.0.32-1.el10_2, aspnetcore-runtime-dbg-9.0 9.0.21-1.el10_2, aspnetcore-targeting-pack-10.0 10.0.13-1.el10_2, aspnetcore-targeting-pack-8.0 8.0.32-1.el10_2, aspnetcore-targeting-pack-9.0 9.0.21-1.el10_2, dotnet-apphost-pack-10.0 10.0.13-1.el10_2, dotnet-apphost-pack-8.0 8.0.32-1.el10_2, dotnet-apphost-pack-9.0 9.0.21-1.el10_2, dotnet-host 10.0.13-1.el10_2, dotnet-hostfxr-10.0 10.0.13-1.el10_2, dotnet-hostfxr-8.0 8.0.32-1.el10_2, dotnet-hostfxr-9.0 9.0.21-1.el10_2, dotnet-runtime-10.0 10.0.13-1.el10_2, dotnet-runtime-8.0 8.0.32-1.el10_2, dotnet-runtime-9.0 9.0.21-1.el10_2, dotnet-runtime-dbg-10.0 10.0.13-1.el10_2, dotnet-runtime-dbg-8.0 8.0.32-1.el10_2, dotnet-runtime-dbg-9.0 9.0.21-1.el10_2, dotnet-sdk-10.0 10.0.113-1.el10_2, dotnet-sdk-10.0-source-built-artifacts 10.0.113-1.el10_2, dotnet-sdk-8.0 8.0.132-1.el10_2, dotnet-sdk-8.0-source-built-artifacts 8.0.132-1.el10_2, dotnet-sdk-9.0 9.0.122-1.el10_2, dotnet-sdk-9.0-source-built-artifacts 9.0.122-1.el10_2, dotnet-sdk-aot-10.0 10.0.113-1.el10_2, dotnet-sdk-aot-9.0 9.0.122-1.el10_2, dotnet-sdk-dbg-10.0 10.0.113-1.el10_2, dotnet-sdk-dbg-8.0 8.0.132-1.el10_2, dotnet-sdk-dbg-9.0 9.0.122-1.el10_2, dotnet-targeting-pack-10.0 10.0.13-1.el10_2, dotnet-targeting-pack-8.0 8.0.32-1.el10_2, dotnet-targeting-pack-9.0 9.0.21-1.el10_2, dotnet-templates-10.0 10.0.113-1.el10_2, dotnet-templates-8.0 8.0.132-1.el10_2, dotnet-templates-9.0 9.0.122-1.el10_2, netstandard-targeting-pack-2.1 9.0.122-1.el10_2.",
   "date_published": "2026-10-13T19:01:16Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96230/fixed/almalinux-8",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96230/",
   "title": "CVE-2026-96230 · Microsoft Visual Studio 2022 version 17.14 · fixed in AlmaLinux 8 (aspnetcore-runtime-10.0 10.0.13-1.el8_10 and 39 more)",
   "content_text": "Fixed versions: aspnetcore-runtime-10.0 10.0.13-1.el8_10, aspnetcore-runtime-8.0 8.0.32-2.el8_10, aspnetcore-runtime-9.0 9.0.21-1.el8_10, aspnetcore-runtime-dbg-10.0 10.0.13-1.el8_10, aspnetcore-runtime-dbg-8.0 8.0.32-2.el8_10, aspnetcore-runtime-dbg-9.0 9.0.21-1.el8_10, aspnetcore-targeting-pack-10.0 10.0.13-1.el8_10, aspnetcore-targeting-pack-8.0 8.0.32-2.el8_10, aspnetcore-targeting-pack-9.0 9.0.21-1.el8_10, dotnet 10.0.113-1.el8_10, dotnet-apphost-pack-10.0 10.0.13-1.el8_10, dotnet-apphost-pack-8.0 8.0.32-2.el8_10, dotnet-apphost-pack-9.0 9.0.21-1.el8_10, dotnet-hostfxr-10.0 10.0.13-1.el8_10, dotnet-hostfxr-8.0 8.0.32-2.el8_10, dotnet-hostfxr-9.0 9.0.21-1.el8_10, dotnet-runtime-10.0 10.0.13-1.el8_10, dotnet-runtime-8.0 8.0.32-2.el8_10, dotnet-runtime-9.0 9.0.21-1.el8_10, dotnet-runtime-dbg-10.0 10.0.13-1.el8_10, dotnet-runtime-dbg-8.0 8.0.32-2.el8_10, dotnet-runtime-dbg-9.0 9.0.21-1.el8_10, dotnet-sdk-10.0 10.0.113-1.el8_10, dotnet-sdk-10.0-source-built-artifacts 10.0.113-1.el8_10, dotnet-sdk-8.0 8.0.132-2.el8_10, dotnet-sdk-8.0-source-built-artifacts 8.0.132-2.el8_10, dotnet-sdk-9.0 9.0.122-1.el8_10, dotnet-sdk-9.0-source-built-artifacts 9.0.122-1.el8_10, dotnet-sdk-aot-10.0 10.0.113-1.el8_10, dotnet-sdk-aot-9.0 9.0.122-1.el8_10, dotnet-sdk-dbg-10.0 10.0.113-1.el8_10, dotnet-sdk-dbg-8.0 8.0.132-2.el8_10, dotnet-sdk-dbg-9.0 9.0.122-1.el8_10, dotnet-targeting-pack-10.0 10.0.13-1.el8_10, dotnet-targeting-pack-8.0 8.0.32-2.el8_10, dotnet-targeting-pack-9.0 9.0.21-1.el8_10, dotnet-templates-10.0 10.0.113-1.el8_10, dotnet-templates-8.0 8.0.132-2.el8_10, dotnet-templates-9.0 9.0.122-1.el8_10, netstandard-targeting-pack-2.1 9.0.122-1.el8_10.",
   "date_published": "2026-10-13T19:01:16Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96230/fixed/almalinux-9",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96230/",
   "title": "CVE-2026-96230 · Microsoft Visual Studio 2022 version 17.14 · fixed in AlmaLinux 9 (aspnetcore-runtime-10.0 10.0.13-1.el9_8 and 39 more)",
   "content_text": "Fixed versions: aspnetcore-runtime-10.0 10.0.13-1.el9_8, aspnetcore-runtime-8.0 8.0.32-1.el9_8, aspnetcore-runtime-9.0 9.0.21-1.el9_8, aspnetcore-runtime-dbg-10.0 10.0.13-1.el9_8, aspnetcore-runtime-dbg-8.0 8.0.32-1.el9_8, aspnetcore-runtime-dbg-9.0 9.0.21-1.el9_8, aspnetcore-targeting-pack-10.0 10.0.13-1.el9_8, aspnetcore-targeting-pack-8.0 8.0.32-1.el9_8, aspnetcore-targeting-pack-9.0 9.0.21-1.el9_8, dotnet-apphost-pack-10.0 10.0.13-1.el9_8, dotnet-apphost-pack-8.0 8.0.32-1.el9_8, dotnet-apphost-pack-9.0 9.0.21-1.el9_8, dotnet-host 10.0.13-1.el9_8, dotnet-hostfxr-10.0 10.0.13-1.el9_8, dotnet-hostfxr-8.0 8.0.32-1.el9_8, dotnet-hostfxr-9.0 9.0.21-1.el9_8, dotnet-runtime-10.0 10.0.13-1.el9_8, dotnet-runtime-8.0 8.0.32-1.el9_8, dotnet-runtime-9.0 9.0.21-1.el9_8, dotnet-runtime-dbg-10.0 10.0.13-1.el9_8, dotnet-runtime-dbg-8.0 8.0.32-1.el9_8, dotnet-runtime-dbg-9.0 9.0.21-1.el9_8, dotnet-sdk-10.0 10.0.113-1.el9_8, dotnet-sdk-10.0-source-built-artifacts 10.0.113-1.el9_8, dotnet-sdk-8.0 8.0.132-1.el9_8, dotnet-sdk-8.0-source-built-artifacts 8.0.132-1.el9_8, dotnet-sdk-9.0 9.0.122-1.el9_8, dotnet-sdk-9.0-source-built-artifacts 9.0.122-1.el9_8, dotnet-sdk-aot-10.0 10.0.113-1.el9_8, dotnet-sdk-aot-9.0 9.0.122-1.el9_8, dotnet-sdk-dbg-10.0 10.0.113-1.el9_8, dotnet-sdk-dbg-8.0 8.0.132-1.el9_8, dotnet-sdk-dbg-9.0 9.0.122-1.el9_8, dotnet-targeting-pack-10.0 10.0.13-1.el9_8, dotnet-targeting-pack-8.0 8.0.32-1.el9_8, dotnet-targeting-pack-9.0 9.0.21-1.el9_8, dotnet-templates-10.0 10.0.113-1.el9_8, dotnet-templates-8.0 8.0.132-1.el9_8, dotnet-templates-9.0 9.0.122-1.el9_8, netstandard-targeting-pack-2.1 9.0.122-1.el9_8.",
   "date_published": "2026-10-13T19:01:16Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96230/fixed/nuget",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96230/",
   "title": "CVE-2026-96230 · Microsoft Visual Studio 2022 version 17.14 · fixed upstream (NuGet)",
   "content_text": "Fixed versions: Microsoft.AspNetCore.Components.WebAssembly.Server 10.0.13, Microsoft.AspNetCore.Components.WebAssembly.Server 11.0.0-rc.2, Microsoft.AspNetCore.Components.WebAssembly.Server 8.0.32, Microsoft.AspNetCore.Components.WebAssembly.Server 9.0.21.",
   "date_published": "2026-10-13T19:01:16Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96230/fixed/rocky-linux-10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96230/",
   "title": "CVE-2026-96230 · Microsoft Visual Studio 2022 version 17.14 · fixed in Rocky Linux 10 (dotnet10.0 0:10.0.113-1.el10_2 and 2 more)",
   "content_text": "Fixed versions: dotnet10.0 0:10.0.113-1.el10_2, dotnet8.0 0:8.0.132-1.el10_2, dotnet9.0 0:9.0.122-1.el10_2.",
   "date_published": "2026-10-13T19:01:16Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96230/fixed/rocky-linux-8",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96230/",
   "title": "CVE-2026-96230 · Microsoft Visual Studio 2022 version 17.14 · fixed in Rocky Linux 8 (dotnet10.0 0:10.0.113-1.el8_10 and 2 more)",
   "content_text": "Fixed versions: dotnet10.0 0:10.0.113-1.el8_10, dotnet8.0 0:8.0.132-2.el8_10, dotnet9.0 0:9.0.122-1.el8_10.",
   "date_published": "2026-10-13T19:01:16Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96230/fixed/rocky-linux-9",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96230/",
   "title": "CVE-2026-96230 · Microsoft Visual Studio 2022 version 17.14 · fixed in Rocky Linux 9 (dotnet10.0 0:10.0.113-1.el9_8 and 2 more)",
   "content_text": "Fixed versions: dotnet10.0 0:10.0.113-1.el9_8, dotnet8.0 0:8.0.132-1.el9_8, dotnet9.0 0:9.0.122-1.el9_8.",
   "date_published": "2026-10-13T19:01:16Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96230/fixed/ubuntu-22.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96230/",
   "title": "CVE-2026-96230 · Microsoft Visual Studio 2022 version 17.14 · fixed in Ubuntu 22.04 LTS (dotnet8 8.0.132-8.0.32-0ubuntu1~22.04.1)",
   "content_text": "Fixed versions: dotnet8 8.0.132-8.0.32-0ubuntu1~22.04.1.",
   "date_published": "2026-10-13T19:01:16Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96230/fixed/ubuntu-24.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96230/",
   "title": "CVE-2026-96230 · Microsoft Visual Studio 2022 version 17.14 · fixed in Ubuntu 24.04 LTS (dotnet10 10.0.113-10.0.13-0ubuntu1~24.04.1 and 1 more)",
   "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~24.04.1, dotnet8 8.0.132-8.0.32-0ubuntu1~24.04.1.",
   "date_published": "2026-10-13T19:01:16Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96230/fixed/ubuntu-26.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96230/",
   "title": "CVE-2026-96230 · Microsoft Visual Studio 2022 version 17.14 · fixed in Ubuntu 26.04 LTS (dotnet10 10.0.113-10.0.13-0ubuntu1~26.04.1)",
   "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~26.04.1.",
   "date_published": "2026-10-13T19:01:16Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96230/fixed/ubuntu-26.10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96230/",
   "title": "CVE-2026-96230 · Microsoft Visual Studio 2022 version 17.14 · fixed in Ubuntu 26.10 (dotnet10 10.0.113-10.0.13-0ubuntu1~26.10.1 and 1 more)",
   "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~26.10.1, dotnet11 11.0.100-11.0.0~rc2-0ubuntu1~26.10.1.",
   "date_published": "2026-10-13T19:01:16Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96229/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96229/",
   "title": "CVE-2026-96229 · Microsoft .NET 10.0 runtime · disclosed",
   "content_text": "Permissive list of allowed inputs in .NET allows an unauthorized attacker to disclose information over a network.",
   "date_published": "2026-10-13T19:01:16Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96229/fixed/nuget",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96229/",
   "title": "CVE-2026-96229 · Microsoft .NET 10.0 runtime · fixed upstream (NuGet)",
   "content_text": "Fixed versions: Microsoft.WindowsDesktop.App.Runtime.win-arm64 10.0.13, Microsoft.WindowsDesktop.App.Runtime.win-arm64 11.0.0-rc.2, Microsoft.WindowsDesktop.App.Runtime.win-arm64 8.0.32, Microsoft.WindowsDesktop.App.Runtime.win-arm64 9.0.21, Microsoft.WindowsDesktop.App.Runtime.win-x64 10.0.13, Microsoft.WindowsDesktop.App.Runtime.win-x64 11.0.0-rc.2, Microsoft.WindowsDesktop.App.Runtime.win-x64 8.0.32, Microsoft.WindowsDesktop.App.Runtime.win-x64 9.0.21, Microsoft.WindowsDesktop.App.Runtime.win-x86 10.0.13, Microsoft.WindowsDesktop.App.Runtime.win-x86 11.0.0-rc.2, Microsoft.WindowsDesktop.App.Runtime.win-x86 8.0.32, Microsoft.WindowsDesktop.App.Runtime.win-x86 9.0.21.",
   "date_published": "2026-10-13T19:01:16Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96225/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96225/",
   "title": "CVE-2026-96225 · Microsoft .NET 10.0 runtime · disclosed",
   "content_text": "Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.",
   "date_published": "2026-10-13T19:01:16Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96225/fixed/almalinux-10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96225/",
   "title": "CVE-2026-96225 · Microsoft .NET 10.0 runtime · fixed in AlmaLinux 10 (aspnetcore-runtime-10.0 10.0.13-1.el10_2 and 39 more)",
   "content_text": "Fixed versions: aspnetcore-runtime-10.0 10.0.13-1.el10_2, aspnetcore-runtime-8.0 8.0.32-1.el10_2, aspnetcore-runtime-9.0 9.0.21-1.el10_2, aspnetcore-runtime-dbg-10.0 10.0.13-1.el10_2, aspnetcore-runtime-dbg-8.0 8.0.32-1.el10_2, aspnetcore-runtime-dbg-9.0 9.0.21-1.el10_2, aspnetcore-targeting-pack-10.0 10.0.13-1.el10_2, aspnetcore-targeting-pack-8.0 8.0.32-1.el10_2, aspnetcore-targeting-pack-9.0 9.0.21-1.el10_2, dotnet-apphost-pack-10.0 10.0.13-1.el10_2, dotnet-apphost-pack-8.0 8.0.32-1.el10_2, dotnet-apphost-pack-9.0 9.0.21-1.el10_2, dotnet-host 10.0.13-1.el10_2, dotnet-hostfxr-10.0 10.0.13-1.el10_2, dotnet-hostfxr-8.0 8.0.32-1.el10_2, dotnet-hostfxr-9.0 9.0.21-1.el10_2, dotnet-runtime-10.0 10.0.13-1.el10_2, dotnet-runtime-8.0 8.0.32-1.el10_2, dotnet-runtime-9.0 9.0.21-1.el10_2, dotnet-runtime-dbg-10.0 10.0.13-1.el10_2, dotnet-runtime-dbg-8.0 8.0.32-1.el10_2, dotnet-runtime-dbg-9.0 9.0.21-1.el10_2, dotnet-sdk-10.0 10.0.113-1.el10_2, dotnet-sdk-10.0-source-built-artifacts 10.0.113-1.el10_2, dotnet-sdk-8.0 8.0.132-1.el10_2, dotnet-sdk-8.0-source-built-artifacts 8.0.132-1.el10_2, dotnet-sdk-9.0 9.0.122-1.el10_2, dotnet-sdk-9.0-source-built-artifacts 9.0.122-1.el10_2, dotnet-sdk-aot-10.0 10.0.113-1.el10_2, dotnet-sdk-aot-9.0 9.0.122-1.el10_2, dotnet-sdk-dbg-10.0 10.0.113-1.el10_2, dotnet-sdk-dbg-8.0 8.0.132-1.el10_2, dotnet-sdk-dbg-9.0 9.0.122-1.el10_2, dotnet-targeting-pack-10.0 10.0.13-1.el10_2, dotnet-targeting-pack-8.0 8.0.32-1.el10_2, dotnet-targeting-pack-9.0 9.0.21-1.el10_2, dotnet-templates-10.0 10.0.113-1.el10_2, dotnet-templates-8.0 8.0.132-1.el10_2, dotnet-templates-9.0 9.0.122-1.el10_2, netstandard-targeting-pack-2.1 9.0.122-1.el10_2.",
   "date_published": "2026-10-13T19:01:16Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96225/fixed/almalinux-8",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96225/",
   "title": "CVE-2026-96225 · Microsoft .NET 10.0 runtime · fixed in AlmaLinux 8 (aspnetcore-runtime-10.0 10.0.13-1.el8_10 and 39 more)",
   "content_text": "Fixed versions: aspnetcore-runtime-10.0 10.0.13-1.el8_10, aspnetcore-runtime-8.0 8.0.32-2.el8_10, aspnetcore-runtime-9.0 9.0.21-1.el8_10, aspnetcore-runtime-dbg-10.0 10.0.13-1.el8_10, aspnetcore-runtime-dbg-8.0 8.0.32-2.el8_10, aspnetcore-runtime-dbg-9.0 9.0.21-1.el8_10, aspnetcore-targeting-pack-10.0 10.0.13-1.el8_10, aspnetcore-targeting-pack-8.0 8.0.32-2.el8_10, aspnetcore-targeting-pack-9.0 9.0.21-1.el8_10, dotnet 10.0.113-1.el8_10, dotnet-apphost-pack-10.0 10.0.13-1.el8_10, dotnet-apphost-pack-8.0 8.0.32-2.el8_10, dotnet-apphost-pack-9.0 9.0.21-1.el8_10, dotnet-hostfxr-10.0 10.0.13-1.el8_10, dotnet-hostfxr-8.0 8.0.32-2.el8_10, dotnet-hostfxr-9.0 9.0.21-1.el8_10, dotnet-runtime-10.0 10.0.13-1.el8_10, dotnet-runtime-8.0 8.0.32-2.el8_10, dotnet-runtime-9.0 9.0.21-1.el8_10, dotnet-runtime-dbg-10.0 10.0.13-1.el8_10, dotnet-runtime-dbg-8.0 8.0.32-2.el8_10, dotnet-runtime-dbg-9.0 9.0.21-1.el8_10, dotnet-sdk-10.0 10.0.113-1.el8_10, dotnet-sdk-10.0-source-built-artifacts 10.0.113-1.el8_10, dotnet-sdk-8.0 8.0.132-2.el8_10, dotnet-sdk-8.0-source-built-artifacts 8.0.132-2.el8_10, dotnet-sdk-9.0 9.0.122-1.el8_10, dotnet-sdk-9.0-source-built-artifacts 9.0.122-1.el8_10, dotnet-sdk-aot-10.0 10.0.113-1.el8_10, dotnet-sdk-aot-9.0 9.0.122-1.el8_10, dotnet-sdk-dbg-10.0 10.0.113-1.el8_10, dotnet-sdk-dbg-8.0 8.0.132-2.el8_10, dotnet-sdk-dbg-9.0 9.0.122-1.el8_10, dotnet-targeting-pack-10.0 10.0.13-1.el8_10, dotnet-targeting-pack-8.0 8.0.32-2.el8_10, dotnet-targeting-pack-9.0 9.0.21-1.el8_10, dotnet-templates-10.0 10.0.113-1.el8_10, dotnet-templates-8.0 8.0.132-2.el8_10, dotnet-templates-9.0 9.0.122-1.el8_10, netstandard-targeting-pack-2.1 9.0.122-1.el8_10.",
   "date_published": "2026-10-13T19:01:16Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96225/fixed/almalinux-9",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96225/",
   "title": "CVE-2026-96225 · Microsoft .NET 10.0 runtime · fixed in AlmaLinux 9 (aspnetcore-runtime-10.0 10.0.13-1.el9_8 and 39 more)",
   "content_text": "Fixed versions: aspnetcore-runtime-10.0 10.0.13-1.el9_8, aspnetcore-runtime-8.0 8.0.32-1.el9_8, aspnetcore-runtime-9.0 9.0.21-1.el9_8, aspnetcore-runtime-dbg-10.0 10.0.13-1.el9_8, aspnetcore-runtime-dbg-8.0 8.0.32-1.el9_8, aspnetcore-runtime-dbg-9.0 9.0.21-1.el9_8, aspnetcore-targeting-pack-10.0 10.0.13-1.el9_8, aspnetcore-targeting-pack-8.0 8.0.32-1.el9_8, aspnetcore-targeting-pack-9.0 9.0.21-1.el9_8, dotnet-apphost-pack-10.0 10.0.13-1.el9_8, dotnet-apphost-pack-8.0 8.0.32-1.el9_8, dotnet-apphost-pack-9.0 9.0.21-1.el9_8, dotnet-host 10.0.13-1.el9_8, dotnet-hostfxr-10.0 10.0.13-1.el9_8, dotnet-hostfxr-8.0 8.0.32-1.el9_8, dotnet-hostfxr-9.0 9.0.21-1.el9_8, dotnet-runtime-10.0 10.0.13-1.el9_8, dotnet-runtime-8.0 8.0.32-1.el9_8, dotnet-runtime-9.0 9.0.21-1.el9_8, dotnet-runtime-dbg-10.0 10.0.13-1.el9_8, dotnet-runtime-dbg-8.0 8.0.32-1.el9_8, dotnet-runtime-dbg-9.0 9.0.21-1.el9_8, dotnet-sdk-10.0 10.0.113-1.el9_8, dotnet-sdk-10.0-source-built-artifacts 10.0.113-1.el9_8, dotnet-sdk-8.0 8.0.132-1.el9_8, dotnet-sdk-8.0-source-built-artifacts 8.0.132-1.el9_8, dotnet-sdk-9.0 9.0.122-1.el9_8, dotnet-sdk-9.0-source-built-artifacts 9.0.122-1.el9_8, dotnet-sdk-aot-10.0 10.0.113-1.el9_8, dotnet-sdk-aot-9.0 9.0.122-1.el9_8, dotnet-sdk-dbg-10.0 10.0.113-1.el9_8, dotnet-sdk-dbg-8.0 8.0.132-1.el9_8, dotnet-sdk-dbg-9.0 9.0.122-1.el9_8, dotnet-targeting-pack-10.0 10.0.13-1.el9_8, dotnet-targeting-pack-8.0 8.0.32-1.el9_8, dotnet-targeting-pack-9.0 9.0.21-1.el9_8, dotnet-templates-10.0 10.0.113-1.el9_8, dotnet-templates-8.0 8.0.132-1.el9_8, dotnet-templates-9.0 9.0.122-1.el9_8, netstandard-targeting-pack-2.1 9.0.122-1.el9_8.",
   "date_published": "2026-10-13T19:01:16Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96225/fixed/nuget",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96225/",
   "title": "CVE-2026-96225 · Microsoft .NET 10.0 runtime · fixed upstream (NuGet)",
   "content_text": "Fixed versions: Microsoft.NETCore.App.Runtime.linux-arm 10.0.13, Microsoft.NETCore.App.Runtime.linux-arm 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.linux-arm 8.0.32, Microsoft.NETCore.App.Runtime.linux-arm 9.0.21, Microsoft.NETCore.App.Runtime.linux-arm64 10.0.13, Microsoft.NETCore.App.Runtime.linux-arm64 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.linux-arm64 8.0.32, Microsoft.NETCore.App.Runtime.linux-arm64 9.0.21, Microsoft.NETCore.App.Runtime.linux-musl-arm 10.0.13, Microsoft.NETCore.App.Runtime.linux-musl-arm 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.linux-musl-arm 8.0.32, Microsoft.NETCore.App.Runtime.linux-musl-arm 9.0.21, Microsoft.NETCore.App.Runtime.linux-musl-arm64 10.0.13, Microsoft.NETCore.App.Runtime.linux-musl-arm64 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.linux-musl-arm64 8.0.32, Microsoft.NETCore.App.Runtime.linux-musl-arm64 9.0.21, Microsoft.NETCore.App.Runtime.linux-musl-x64 10.0.13, Microsoft.NETCore.App.Runtime.linux-musl-x64 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.linux-musl-x64 8.0.32, Microsoft.NETCore.App.Runtime.linux-musl-x64 9.0.21, Microsoft.NETCore.App.Runtime.linux-x64 10.0.13, Microsoft.NETCore.App.Runtime.linux-x64 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.linux-x64 8.0.32, Microsoft.NETCore.App.Runtime.linux-x64 9.0.21, Microsoft.NETCore.App.Runtime.osx-arm64 10.0.13, Microsoft.NETCore.App.Runtime.osx-arm64 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.osx-arm64 8.0.32, Microsoft.NETCore.App.Runtime.osx-arm64 9.0.21, Microsoft.NETCore.App.Runtime.osx-x64 10.0.13, Microsoft.NETCore.App.Runtime.osx-x64 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.osx-x64 8.0.32, Microsoft.NETCore.App.Runtime.osx-x64 9.0.21.",
   "date_published": "2026-10-13T19:01:16Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96225/fixed/rocky-linux-10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96225/",
   "title": "CVE-2026-96225 · Microsoft .NET 10.0 runtime · fixed in Rocky Linux 10 (dotnet10.0 0:10.0.113-1.el10_2 and 2 more)",
   "content_text": "Fixed versions: dotnet10.0 0:10.0.113-1.el10_2, dotnet8.0 0:8.0.132-1.el10_2, dotnet9.0 0:9.0.122-1.el10_2.",
   "date_published": "2026-10-13T19:01:16Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96225/fixed/rocky-linux-8",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96225/",
   "title": "CVE-2026-96225 · Microsoft .NET 10.0 runtime · fixed in Rocky Linux 8 (dotnet10.0 0:10.0.113-1.el8_10 and 2 more)",
   "content_text": "Fixed versions: dotnet10.0 0:10.0.113-1.el8_10, dotnet8.0 0:8.0.132-2.el8_10, dotnet9.0 0:9.0.122-1.el8_10.",
   "date_published": "2026-10-13T19:01:16Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96225/fixed/rocky-linux-9",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96225/",
   "title": "CVE-2026-96225 · Microsoft .NET 10.0 runtime · fixed in Rocky Linux 9 (dotnet10.0 0:10.0.113-1.el9_8 and 2 more)",
   "content_text": "Fixed versions: dotnet10.0 0:10.0.113-1.el9_8, dotnet8.0 0:8.0.132-1.el9_8, dotnet9.0 0:9.0.122-1.el9_8.",
   "date_published": "2026-10-13T19:01:16Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96225/fixed/ubuntu-22.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96225/",
   "title": "CVE-2026-96225 · Microsoft .NET 10.0 runtime · fixed in Ubuntu 22.04 LTS (dotnet8 8.0.132-8.0.32-0ubuntu1~22.04.1)",
   "content_text": "Fixed versions: dotnet8 8.0.132-8.0.32-0ubuntu1~22.04.1.",
   "date_published": "2026-10-13T19:01:16Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96225/fixed/ubuntu-24.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96225/",
   "title": "CVE-2026-96225 · Microsoft .NET 10.0 runtime · fixed in Ubuntu 24.04 LTS (dotnet10 10.0.113-10.0.13-0ubuntu1~24.04.1 and 1 more)",
   "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~24.04.1, dotnet8 8.0.132-8.0.32-0ubuntu1~24.04.1.",
   "date_published": "2026-10-13T19:01:16Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96225/fixed/ubuntu-26.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96225/",
   "title": "CVE-2026-96225 · Microsoft .NET 10.0 runtime · fixed in Ubuntu 26.04 LTS (dotnet10 10.0.113-10.0.13-0ubuntu1~26.04.1)",
   "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~26.04.1.",
   "date_published": "2026-10-13T19:01:16Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96225/fixed/ubuntu-26.10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96225/",
   "title": "CVE-2026-96225 · Microsoft .NET 10.0 runtime · fixed in Ubuntu 26.10 (dotnet10 10.0.113-10.0.13-0ubuntu1~26.10.1 and 1 more)",
   "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~26.10.1, dotnet11 11.0.100-11.0.0~rc2-0ubuntu1~26.10.1.",
   "date_published": "2026-10-13T19:01:16Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96231/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96231/",
   "title": "CVE-2026-96231 · Microsoft .NET 10.0 runtime · disclosed",
   "content_text": "Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.",
   "date_published": "2026-10-13T19:01:16Z"
  }
 ]
}