{ "version": "https://jsonfeed.org/version/1.1", "title": "Microsoft .NET 10.0 runtime: important CVE events", "home_page_url": "https://patchwire.jonathanross.dev/products/microsoft--net-10-0-runtime/", "feed_url": "https://patchwire.jonathanross.dev/feeds/products/microsoft--net-10-0-runtime/important.json", "authors": [ { "name": "Patchwire" } ], "language": "en", "items": [ { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-105016/disclosed", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-105016/", "title": "CVE-2026-105016 · Microsoft .NET 10.0 runtime · disclosed", "content_text": "Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network.", "date_published": "2026-10-13T19:01:45Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-105016/fixed/nuget", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-105016/", "title": "CVE-2026-105016 · Microsoft .NET 10.0 runtime · fixed upstream (NuGet)", "content_text": "Fixed versions: Microsoft.Native.Quic.MsQuic.Schannel 2.5.11-ci.159417053.", "date_published": "2026-10-13T19:01:45Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-58280/disclosed", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-58280/", "title": "CVE-2026-58280 · Microsoft .NET 10.0 runtime · disclosed", "content_text": "Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network.", "date_published": "2026-10-13T19:01:30Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-58280/fixed/almalinux-10", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-58280/", "title": "CVE-2026-58280 · Microsoft .NET 10.0 runtime · fixed in AlmaLinux 10 (aspnetcore-runtime-10.0 10.0.13-1.el10_2 and 39 more)", "content_text": "Fixed versions: aspnetcore-runtime-10.0 10.0.13-1.el10_2, aspnetcore-runtime-8.0 8.0.32-1.el10_2, aspnetcore-runtime-9.0 9.0.21-1.el10_2, aspnetcore-runtime-dbg-10.0 10.0.13-1.el10_2, aspnetcore-runtime-dbg-8.0 8.0.32-1.el10_2, aspnetcore-runtime-dbg-9.0 9.0.21-1.el10_2, aspnetcore-targeting-pack-10.0 10.0.13-1.el10_2, aspnetcore-targeting-pack-8.0 8.0.32-1.el10_2, aspnetcore-targeting-pack-9.0 9.0.21-1.el10_2, dotnet-apphost-pack-10.0 10.0.13-1.el10_2, dotnet-apphost-pack-8.0 8.0.32-1.el10_2, dotnet-apphost-pack-9.0 9.0.21-1.el10_2, dotnet-host 10.0.13-1.el10_2, dotnet-hostfxr-10.0 10.0.13-1.el10_2, dotnet-hostfxr-8.0 8.0.32-1.el10_2, dotnet-hostfxr-9.0 9.0.21-1.el10_2, dotnet-runtime-10.0 10.0.13-1.el10_2, dotnet-runtime-8.0 8.0.32-1.el10_2, dotnet-runtime-9.0 9.0.21-1.el10_2, dotnet-runtime-dbg-10.0 10.0.13-1.el10_2, dotnet-runtime-dbg-8.0 8.0.32-1.el10_2, dotnet-runtime-dbg-9.0 9.0.21-1.el10_2, dotnet-sdk-10.0 10.0.113-1.el10_2, dotnet-sdk-10.0-source-built-artifacts 10.0.113-1.el10_2, dotnet-sdk-8.0 8.0.132-1.el10_2, dotnet-sdk-8.0-source-built-artifacts 8.0.132-1.el10_2, dotnet-sdk-9.0 9.0.122-1.el10_2, dotnet-sdk-9.0-source-built-artifacts 9.0.122-1.el10_2, dotnet-sdk-aot-10.0 10.0.113-1.el10_2, dotnet-sdk-aot-9.0 9.0.122-1.el10_2, dotnet-sdk-dbg-10.0 10.0.113-1.el10_2, dotnet-sdk-dbg-8.0 8.0.132-1.el10_2, dotnet-sdk-dbg-9.0 9.0.122-1.el10_2, dotnet-targeting-pack-10.0 10.0.13-1.el10_2, dotnet-targeting-pack-8.0 8.0.32-1.el10_2, dotnet-targeting-pack-9.0 9.0.21-1.el10_2, dotnet-templates-10.0 10.0.113-1.el10_2, dotnet-templates-8.0 8.0.132-1.el10_2, dotnet-templates-9.0 9.0.122-1.el10_2, netstandard-targeting-pack-2.1 9.0.122-1.el10_2.", "date_published": "2026-10-13T19:01:30Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-58280/fixed/almalinux-8", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-58280/", "title": "CVE-2026-58280 · Microsoft .NET 10.0 runtime · fixed in AlmaLinux 8 (aspnetcore-runtime-10.0 10.0.13-1.el8_10 and 39 more)", "content_text": "Fixed versions: aspnetcore-runtime-10.0 10.0.13-1.el8_10, aspnetcore-runtime-8.0 8.0.32-2.el8_10, aspnetcore-runtime-9.0 9.0.21-1.el8_10, aspnetcore-runtime-dbg-10.0 10.0.13-1.el8_10, aspnetcore-runtime-dbg-8.0 8.0.32-2.el8_10, aspnetcore-runtime-dbg-9.0 9.0.21-1.el8_10, aspnetcore-targeting-pack-10.0 10.0.13-1.el8_10, aspnetcore-targeting-pack-8.0 8.0.32-2.el8_10, aspnetcore-targeting-pack-9.0 9.0.21-1.el8_10, dotnet 10.0.113-1.el8_10, dotnet-apphost-pack-10.0 10.0.13-1.el8_10, dotnet-apphost-pack-8.0 8.0.32-2.el8_10, dotnet-apphost-pack-9.0 9.0.21-1.el8_10, dotnet-hostfxr-10.0 10.0.13-1.el8_10, dotnet-hostfxr-8.0 8.0.32-2.el8_10, dotnet-hostfxr-9.0 9.0.21-1.el8_10, dotnet-runtime-10.0 10.0.13-1.el8_10, dotnet-runtime-8.0 8.0.32-2.el8_10, dotnet-runtime-9.0 9.0.21-1.el8_10, dotnet-runtime-dbg-10.0 10.0.13-1.el8_10, dotnet-runtime-dbg-8.0 8.0.32-2.el8_10, dotnet-runtime-dbg-9.0 9.0.21-1.el8_10, dotnet-sdk-10.0 10.0.113-1.el8_10, dotnet-sdk-10.0-source-built-artifacts 10.0.113-1.el8_10, dotnet-sdk-8.0 8.0.132-2.el8_10, dotnet-sdk-8.0-source-built-artifacts 8.0.132-2.el8_10, dotnet-sdk-9.0 9.0.122-1.el8_10, dotnet-sdk-9.0-source-built-artifacts 9.0.122-1.el8_10, dotnet-sdk-aot-10.0 10.0.113-1.el8_10, dotnet-sdk-aot-9.0 9.0.122-1.el8_10, dotnet-sdk-dbg-10.0 10.0.113-1.el8_10, dotnet-sdk-dbg-8.0 8.0.132-2.el8_10, dotnet-sdk-dbg-9.0 9.0.122-1.el8_10, dotnet-targeting-pack-10.0 10.0.13-1.el8_10, dotnet-targeting-pack-8.0 8.0.32-2.el8_10, dotnet-targeting-pack-9.0 9.0.21-1.el8_10, dotnet-templates-10.0 10.0.113-1.el8_10, dotnet-templates-8.0 8.0.132-2.el8_10, dotnet-templates-9.0 9.0.122-1.el8_10, netstandard-targeting-pack-2.1 9.0.122-1.el8_10.", "date_published": "2026-10-13T19:01:30Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-58280/fixed/almalinux-9", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-58280/", "title": "CVE-2026-58280 · Microsoft .NET 10.0 runtime · fixed in AlmaLinux 9 (aspnetcore-runtime-10.0 10.0.13-1.el9_8 and 39 more)", "content_text": "Fixed versions: aspnetcore-runtime-10.0 10.0.13-1.el9_8, aspnetcore-runtime-8.0 8.0.32-1.el9_8, aspnetcore-runtime-9.0 9.0.21-1.el9_8, aspnetcore-runtime-dbg-10.0 10.0.13-1.el9_8, aspnetcore-runtime-dbg-8.0 8.0.32-1.el9_8, aspnetcore-runtime-dbg-9.0 9.0.21-1.el9_8, aspnetcore-targeting-pack-10.0 10.0.13-1.el9_8, aspnetcore-targeting-pack-8.0 8.0.32-1.el9_8, aspnetcore-targeting-pack-9.0 9.0.21-1.el9_8, dotnet-apphost-pack-10.0 10.0.13-1.el9_8, dotnet-apphost-pack-8.0 8.0.32-1.el9_8, dotnet-apphost-pack-9.0 9.0.21-1.el9_8, dotnet-host 10.0.13-1.el9_8, dotnet-hostfxr-10.0 10.0.13-1.el9_8, dotnet-hostfxr-8.0 8.0.32-1.el9_8, dotnet-hostfxr-9.0 9.0.21-1.el9_8, dotnet-runtime-10.0 10.0.13-1.el9_8, dotnet-runtime-8.0 8.0.32-1.el9_8, dotnet-runtime-9.0 9.0.21-1.el9_8, dotnet-runtime-dbg-10.0 10.0.13-1.el9_8, dotnet-runtime-dbg-8.0 8.0.32-1.el9_8, dotnet-runtime-dbg-9.0 9.0.21-1.el9_8, dotnet-sdk-10.0 10.0.113-1.el9_8, dotnet-sdk-10.0-source-built-artifacts 10.0.113-1.el9_8, dotnet-sdk-8.0 8.0.132-1.el9_8, dotnet-sdk-8.0-source-built-artifacts 8.0.132-1.el9_8, dotnet-sdk-9.0 9.0.122-1.el9_8, dotnet-sdk-9.0-source-built-artifacts 9.0.122-1.el9_8, dotnet-sdk-aot-10.0 10.0.113-1.el9_8, dotnet-sdk-aot-9.0 9.0.122-1.el9_8, dotnet-sdk-dbg-10.0 10.0.113-1.el9_8, dotnet-sdk-dbg-8.0 8.0.132-1.el9_8, dotnet-sdk-dbg-9.0 9.0.122-1.el9_8, dotnet-targeting-pack-10.0 10.0.13-1.el9_8, dotnet-targeting-pack-8.0 8.0.32-1.el9_8, dotnet-targeting-pack-9.0 9.0.21-1.el9_8, dotnet-templates-10.0 10.0.113-1.el9_8, dotnet-templates-8.0 8.0.132-1.el9_8, dotnet-templates-9.0 9.0.122-1.el9_8, netstandard-targeting-pack-2.1 9.0.122-1.el9_8.", "date_published": "2026-10-13T19:01:30Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-58280/fixed/nuget", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-58280/", "title": "CVE-2026-58280 · Microsoft .NET 10.0 runtime · fixed upstream (NuGet)", "content_text": "Fixed versions: Microsoft.NETCore.App.Runtime.linux-arm 10.0.13, Microsoft.NETCore.App.Runtime.linux-arm 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.linux-arm 8.0.32, Microsoft.NETCore.App.Runtime.linux-arm 9.0.21, Microsoft.NETCore.App.Runtime.linux-arm64 10.0.13, Microsoft.NETCore.App.Runtime.linux-arm64 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.linux-arm64 8.0.32, Microsoft.NETCore.App.Runtime.linux-arm64 9.0.21, Microsoft.NETCore.App.Runtime.linux-musl-arm 10.0.13, Microsoft.NETCore.App.Runtime.linux-musl-arm 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.linux-musl-arm 8.0.32, Microsoft.NETCore.App.Runtime.linux-musl-arm 9.0.21, Microsoft.NETCore.App.Runtime.linux-musl-arm64 10.0.13, Microsoft.NETCore.App.Runtime.linux-musl-arm64 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.linux-musl-arm64 8.0.32, Microsoft.NETCore.App.Runtime.linux-musl-arm64 9.0.21, Microsoft.NETCore.App.Runtime.linux-musl-x64 10.0.13, Microsoft.NETCore.App.Runtime.linux-musl-x64 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.linux-musl-x64 8.0.32, Microsoft.NETCore.App.Runtime.linux-musl-x64 9.0.21, Microsoft.NETCore.App.Runtime.linux-x64 10.0.13, Microsoft.NETCore.App.Runtime.linux-x64 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.linux-x64 8.0.32, Microsoft.NETCore.App.Runtime.linux-x64 9.0.21, Microsoft.NETCore.App.Runtime.osx-arm64 10.0.13, Microsoft.NETCore.App.Runtime.osx-arm64 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.osx-arm64 8.0.32, Microsoft.NETCore.App.Runtime.osx-arm64 9.0.21, Microsoft.NETCore.App.Runtime.osx-x64 10.0.13, Microsoft.NETCore.App.Runtime.osx-x64 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.osx-x64 8.0.32, Microsoft.NETCore.App.Runtime.osx-x64 9.0.21, Microsoft.NETCore.App.Runtime.win-arm 10.0.13, Microsoft.NETCore.App.Runtime.win-arm 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.win-arm 8.0.32, Microsoft.NETCore.App.Runtime.win-arm 9.0.21, Microsoft.NETCore.App.Runtime.win-arm64 10.0.13, Microsoft.NETCore.App.Runtime.win-arm64 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.win-arm64 8.0.32, Microsoft.NETCore.App.Runtime.win-arm64 9.0.21, Microsoft.NETCore.App.Runtime.win-x64 10.0.13, Microsoft.NETCore.App.Runtime.win-x64 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.win-x64 8.0.32, Microsoft.NETCore.App.Runtime.win-x64 9.0.21, Microsoft.NETCore.App.Runtime.win-x86 10.0.13, Microsoft.NETCore.App.Runtime.win-x86 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.win-x86 8.0.32, Microsoft.NETCore.App.Runtime.win-x86 9.0.21.", "date_published": "2026-10-13T19:01:30Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-58280/fixed/red-hat-hummingbird-1", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-58280/", "title": "CVE-2026-58280 · Microsoft .NET 10.0 runtime · fixed in Red Hat hummingbird 1 (aspnetcore-runtime-8.0 0:8.0.32-0.1.hum1 and 33 more)", "content_text": "Fixed versions: aspnetcore-runtime-8.0 0:8.0.32-0.1.hum1, aspnetcore-runtime-9.0 0:9.0.21-0.1.hum1, aspnetcore-runtime-dbg-8.0 0:8.0.32-0.1.hum1, aspnetcore-runtime-dbg-9.0 0:9.0.21-0.1.hum1, aspnetcore-targeting-pack-8.0 0:8.0.32-0.1.hum1, aspnetcore-targeting-pack-9.0 0:9.0.21-0.1.hum1, dotnet-apphost-pack-8.0 0:8.0.32-0.1.hum1, dotnet-apphost-pack-9.0 0:9.0.21-0.1.hum1, dotnet-hostfxr-8.0 0:8.0.32-0.1.hum1, dotnet-hostfxr-9.0 0:9.0.21-0.1.hum1, dotnet-runtime-8.0 0:8.0.32-0.1.hum1, dotnet-runtime-9.0 0:9.0.21-0.1.hum1, dotnet-runtime-dbg-8.0 0:8.0.32-0.1.hum1, dotnet-runtime-dbg-9.0 0:9.0.21-0.1.hum1, dotnet-sdk-10.0 0:10.0.113-1.hum1, dotnet-sdk-10.0-source-built-artifacts 0:10.0.113-1.hum1, dotnet-sdk-8.0 0:8.0.132-0.1.hum1, dotnet-sdk-8.0-source-built-artifacts 0:8.0.132-0.1.hum1, dotnet-sdk-9.0 0:9.0.122-0.1.hum1, dotnet-sdk-9.0-source-built-artifacts 0:9.0.122-0.1.hum1, dotnet-sdk-aot-10.0 0:10.0.113-1.hum1, dotnet-sdk-aot-9.0 0:9.0.122-0.1.hum1, dotnet-sdk-dbg-10.0 0:10.0.113-1.hum1, dotnet-sdk-dbg-8.0 0:8.0.132-0.1.hum1, dotnet-sdk-dbg-9.0 0:9.0.122-0.1.hum1, dotnet-targeting-pack-8.0 0:8.0.32-0.1.hum1, dotnet-targeting-pack-9.0 0:9.0.21-0.1.hum1, dotnet-templates-10.0 0:10.0.113-1.hum1, dotnet-templates-8.0 0:8.0.132-0.1.hum1, dotnet-templates-9.0 0:9.0.122-0.1.hum1, dotnet10.0 0:10.0.113-1.hum1, dotnet8.0 0:8.0.132-0.1.hum1, dotnet9.0 0:9.0.122-0.1.hum1, netstandard-targeting-pack-2.1 0:9.0.122-0.1.hum1.", "date_published": "2026-10-13T19:01:30Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-58280/fixed/rocky-linux-10", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-58280/", "title": "CVE-2026-58280 · Microsoft .NET 10.0 runtime · fixed in Rocky Linux 10 (dotnet10.0 0:10.0.113-1.el10_2 and 2 more)", "content_text": "Fixed versions: dotnet10.0 0:10.0.113-1.el10_2, dotnet8.0 0:8.0.132-1.el10_2, dotnet9.0 0:9.0.122-1.el10_2.", "date_published": "2026-10-13T19:01:30Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-58280/fixed/rocky-linux-8", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-58280/", "title": "CVE-2026-58280 · Microsoft .NET 10.0 runtime · fixed in Rocky Linux 8 (dotnet10.0 0:10.0.113-1.el8_10 and 2 more)", "content_text": "Fixed versions: dotnet10.0 0:10.0.113-1.el8_10, dotnet8.0 0:8.0.132-2.el8_10, dotnet9.0 0:9.0.122-1.el8_10.", "date_published": "2026-10-13T19:01:30Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-58280/fixed/rocky-linux-9", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-58280/", "title": "CVE-2026-58280 · Microsoft .NET 10.0 runtime · fixed in Rocky Linux 9 (dotnet10.0 0:10.0.113-1.el9_8 and 2 more)", "content_text": "Fixed versions: dotnet10.0 0:10.0.113-1.el9_8, dotnet8.0 0:8.0.132-1.el9_8, dotnet9.0 0:9.0.122-1.el9_8.", "date_published": "2026-10-13T19:01:30Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-58280/fixed/ubuntu-22.04-lts", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-58280/", "title": "CVE-2026-58280 · Microsoft .NET 10.0 runtime · fixed in Ubuntu 22.04 LTS (dotnet8 8.0.132-8.0.32-0ubuntu1~22.04.1)", "content_text": "Fixed versions: dotnet8 8.0.132-8.0.32-0ubuntu1~22.04.1.", "date_published": "2026-10-13T19:01:30Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-58280/fixed/ubuntu-24.04-lts", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-58280/", "title": "CVE-2026-58280 · Microsoft .NET 10.0 runtime · fixed in Ubuntu 24.04 LTS (dotnet10 10.0.113-10.0.13-0ubuntu1~24.04.1 and 1 more)", "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~24.04.1, dotnet8 8.0.132-8.0.32-0ubuntu1~24.04.1.", "date_published": "2026-10-13T19:01:30Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-58280/fixed/ubuntu-26.04-lts", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-58280/", "title": "CVE-2026-58280 · Microsoft .NET 10.0 runtime · fixed in Ubuntu 26.04 LTS (dotnet10 10.0.113-10.0.13-0ubuntu1~26.04.1)", "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~26.04.1.", "date_published": "2026-10-13T19:01:30Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-58280/fixed/ubuntu-26.10", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-58280/", "title": "CVE-2026-58280 · Microsoft .NET 10.0 runtime · fixed in Ubuntu 26.10 (dotnet10 10.0.113-10.0.13-0ubuntu1~26.10.1 and 1 more)", "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~26.10.1, dotnet11 11.0.100-11.0.0~rc2-0ubuntu1~26.10.1.", "date_published": "2026-10-13T19:01:30Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96957/disclosed", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96957/", "title": "CVE-2026-96957 · Microsoft .NET 10.0 runtime · disclosed", "content_text": "Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.", "date_published": "2026-10-13T19:01:27Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96957/fixed/almalinux-10", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96957/", "title": "CVE-2026-96957 · Microsoft .NET 10.0 runtime · fixed in AlmaLinux 10 (aspnetcore-runtime-10.0 10.0.13-1.el10_2 and 13 more)", "content_text": "Fixed versions: aspnetcore-runtime-10.0 10.0.13-1.el10_2, aspnetcore-runtime-dbg-10.0 10.0.13-1.el10_2, aspnetcore-targeting-pack-10.0 10.0.13-1.el10_2, dotnet-apphost-pack-10.0 10.0.13-1.el10_2, dotnet-host 10.0.13-1.el10_2, dotnet-hostfxr-10.0 10.0.13-1.el10_2, dotnet-runtime-10.0 10.0.13-1.el10_2, dotnet-runtime-dbg-10.0 10.0.13-1.el10_2, dotnet-sdk-10.0 10.0.113-1.el10_2, dotnet-sdk-10.0-source-built-artifacts 10.0.113-1.el10_2, dotnet-sdk-aot-10.0 10.0.113-1.el10_2, dotnet-sdk-dbg-10.0 10.0.113-1.el10_2, dotnet-targeting-pack-10.0 10.0.13-1.el10_2, dotnet-templates-10.0 10.0.113-1.el10_2.", "date_published": "2026-10-13T19:01:27Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96957/fixed/almalinux-8", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96957/", "title": "CVE-2026-96957 · Microsoft .NET 10.0 runtime · fixed in AlmaLinux 8 (aspnetcore-runtime-10.0 10.0.13-1.el8_10 and 13 more)", "content_text": "Fixed versions: aspnetcore-runtime-10.0 10.0.13-1.el8_10, aspnetcore-runtime-dbg-10.0 10.0.13-1.el8_10, aspnetcore-targeting-pack-10.0 10.0.13-1.el8_10, dotnet 10.0.113-1.el8_10, dotnet-apphost-pack-10.0 10.0.13-1.el8_10, dotnet-hostfxr-10.0 10.0.13-1.el8_10, dotnet-runtime-10.0 10.0.13-1.el8_10, dotnet-runtime-dbg-10.0 10.0.13-1.el8_10, dotnet-sdk-10.0 10.0.113-1.el8_10, dotnet-sdk-10.0-source-built-artifacts 10.0.113-1.el8_10, dotnet-sdk-aot-10.0 10.0.113-1.el8_10, dotnet-sdk-dbg-10.0 10.0.113-1.el8_10, dotnet-targeting-pack-10.0 10.0.13-1.el8_10, dotnet-templates-10.0 10.0.113-1.el8_10.", "date_published": "2026-10-13T19:01:27Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96957/fixed/almalinux-9", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96957/", "title": "CVE-2026-96957 · Microsoft .NET 10.0 runtime · fixed in AlmaLinux 9 (aspnetcore-runtime-10.0 10.0.13-1.el9_8 and 13 more)", "content_text": "Fixed versions: aspnetcore-runtime-10.0 10.0.13-1.el9_8, aspnetcore-runtime-dbg-10.0 10.0.13-1.el9_8, aspnetcore-targeting-pack-10.0 10.0.13-1.el9_8, dotnet-apphost-pack-10.0 10.0.13-1.el9_8, dotnet-host 10.0.13-1.el9_8, dotnet-hostfxr-10.0 10.0.13-1.el9_8, dotnet-runtime-10.0 10.0.13-1.el9_8, dotnet-runtime-dbg-10.0 10.0.13-1.el9_8, dotnet-sdk-10.0 10.0.113-1.el9_8, dotnet-sdk-10.0-source-built-artifacts 10.0.113-1.el9_8, dotnet-sdk-aot-10.0 10.0.113-1.el9_8, dotnet-sdk-dbg-10.0 10.0.113-1.el9_8, dotnet-targeting-pack-10.0 10.0.13-1.el9_8, dotnet-templates-10.0 10.0.113-1.el9_8.", "date_published": "2026-10-13T19:01:27Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96957/fixed/red-hat-hummingbird-1", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96957/", "title": "CVE-2026-96957 · Microsoft .NET 10.0 runtime · fixed in Red Hat hummingbird 1 (dotnet-sdk-10.0 0:10.0.113-1.hum1 and 5 more)", "content_text": "Fixed versions: dotnet-sdk-10.0 0:10.0.113-1.hum1, dotnet-sdk-10.0-source-built-artifacts 0:10.0.113-1.hum1, dotnet-sdk-aot-10.0 0:10.0.113-1.hum1, dotnet-sdk-dbg-10.0 0:10.0.113-1.hum1, dotnet-templates-10.0 0:10.0.113-1.hum1, dotnet10.0 0:10.0.113-1.hum1.", "date_published": "2026-10-13T19:01:27Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96957/fixed/rocky-linux-10", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96957/", "title": "CVE-2026-96957 · Microsoft .NET 10.0 runtime · fixed in Rocky Linux 10 (dotnet10.0 0:10.0.113-1.el10_2)", "content_text": "Fixed versions: dotnet10.0 0:10.0.113-1.el10_2.", "date_published": "2026-10-13T19:01:27Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96957/fixed/rocky-linux-8", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96957/", "title": "CVE-2026-96957 · Microsoft .NET 10.0 runtime · fixed in Rocky Linux 8 (dotnet10.0 0:10.0.113-1.el8_10)", "content_text": "Fixed versions: dotnet10.0 0:10.0.113-1.el8_10.", "date_published": "2026-10-13T19:01:27Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96957/fixed/rocky-linux-9", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96957/", "title": "CVE-2026-96957 · Microsoft .NET 10.0 runtime · fixed in Rocky Linux 9 (dotnet10.0 0:10.0.113-1.el9_8)", "content_text": "Fixed versions: dotnet10.0 0:10.0.113-1.el9_8.", "date_published": "2026-10-13T19:01:27Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96957/fixed/ubuntu-22.04-lts", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96957/", "title": "CVE-2026-96957 · Microsoft .NET 10.0 runtime · fixed in Ubuntu 22.04 LTS (dotnet8 8.0.132-8.0.32-0ubuntu1~22.04.1)", "content_text": "Fixed versions: dotnet8 8.0.132-8.0.32-0ubuntu1~22.04.1.", "date_published": "2026-10-13T19:01:27Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96957/fixed/ubuntu-24.04-lts", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96957/", "title": "CVE-2026-96957 · Microsoft .NET 10.0 runtime · fixed in Ubuntu 24.04 LTS (dotnet10 10.0.113-10.0.13-0ubuntu1~24.04.1 and 1 more)", "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~24.04.1, dotnet8 8.0.132-8.0.32-0ubuntu1~24.04.1.", "date_published": "2026-10-13T19:01:27Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96957/fixed/ubuntu-26.04-lts", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96957/", "title": "CVE-2026-96957 · Microsoft .NET 10.0 runtime · fixed in Ubuntu 26.04 LTS (dotnet10 10.0.113-10.0.13-0ubuntu1~26.04.1)", "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~26.04.1.", "date_published": "2026-10-13T19:01:27Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96957/fixed/ubuntu-26.10", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96957/", "title": "CVE-2026-96957 · Microsoft .NET 10.0 runtime · fixed in Ubuntu 26.10 (dotnet10 10.0.113-10.0.13-0ubuntu1~26.10.1 and 1 more)", "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~26.10.1, dotnet11 11.0.100-11.0.0~rc2-0ubuntu1~26.10.1.", "date_published": "2026-10-13T19:01:27Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96237/disclosed", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96237/", "title": "CVE-2026-96237 · Microsoft .NET 10.0 runtime · disclosed", "content_text": "Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network.", "date_published": "2026-10-13T19:01:16Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96237/fixed/almalinux-10", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96237/", "title": "CVE-2026-96237 · Microsoft .NET 10.0 runtime · fixed in AlmaLinux 10 (aspnetcore-runtime-10.0 10.0.13-1.el10_2 and 39 more)", "content_text": "Fixed versions: aspnetcore-runtime-10.0 10.0.13-1.el10_2, aspnetcore-runtime-8.0 8.0.32-1.el10_2, aspnetcore-runtime-9.0 9.0.21-1.el10_2, aspnetcore-runtime-dbg-10.0 10.0.13-1.el10_2, aspnetcore-runtime-dbg-8.0 8.0.32-1.el10_2, aspnetcore-runtime-dbg-9.0 9.0.21-1.el10_2, aspnetcore-targeting-pack-10.0 10.0.13-1.el10_2, aspnetcore-targeting-pack-8.0 8.0.32-1.el10_2, aspnetcore-targeting-pack-9.0 9.0.21-1.el10_2, dotnet-apphost-pack-10.0 10.0.13-1.el10_2, dotnet-apphost-pack-8.0 8.0.32-1.el10_2, dotnet-apphost-pack-9.0 9.0.21-1.el10_2, dotnet-host 10.0.13-1.el10_2, dotnet-hostfxr-10.0 10.0.13-1.el10_2, dotnet-hostfxr-8.0 8.0.32-1.el10_2, dotnet-hostfxr-9.0 9.0.21-1.el10_2, dotnet-runtime-10.0 10.0.13-1.el10_2, dotnet-runtime-8.0 8.0.32-1.el10_2, dotnet-runtime-9.0 9.0.21-1.el10_2, dotnet-runtime-dbg-10.0 10.0.13-1.el10_2, dotnet-runtime-dbg-8.0 8.0.32-1.el10_2, dotnet-runtime-dbg-9.0 9.0.21-1.el10_2, dotnet-sdk-10.0 10.0.113-1.el10_2, dotnet-sdk-10.0-source-built-artifacts 10.0.113-1.el10_2, dotnet-sdk-8.0 8.0.132-1.el10_2, dotnet-sdk-8.0-source-built-artifacts 8.0.132-1.el10_2, dotnet-sdk-9.0 9.0.122-1.el10_2, dotnet-sdk-9.0-source-built-artifacts 9.0.122-1.el10_2, dotnet-sdk-aot-10.0 10.0.113-1.el10_2, dotnet-sdk-aot-9.0 9.0.122-1.el10_2, dotnet-sdk-dbg-10.0 10.0.113-1.el10_2, dotnet-sdk-dbg-8.0 8.0.132-1.el10_2, dotnet-sdk-dbg-9.0 9.0.122-1.el10_2, dotnet-targeting-pack-10.0 10.0.13-1.el10_2, dotnet-targeting-pack-8.0 8.0.32-1.el10_2, dotnet-targeting-pack-9.0 9.0.21-1.el10_2, dotnet-templates-10.0 10.0.113-1.el10_2, dotnet-templates-8.0 8.0.132-1.el10_2, dotnet-templates-9.0 9.0.122-1.el10_2, netstandard-targeting-pack-2.1 9.0.122-1.el10_2.", "date_published": "2026-10-13T19:01:16Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96237/fixed/almalinux-8", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96237/", "title": "CVE-2026-96237 · Microsoft .NET 10.0 runtime · fixed in AlmaLinux 8 (aspnetcore-runtime-10.0 10.0.13-1.el8_10 and 39 more)", "content_text": "Fixed versions: aspnetcore-runtime-10.0 10.0.13-1.el8_10, aspnetcore-runtime-8.0 8.0.32-2.el8_10, aspnetcore-runtime-9.0 9.0.21-1.el8_10, aspnetcore-runtime-dbg-10.0 10.0.13-1.el8_10, aspnetcore-runtime-dbg-8.0 8.0.32-2.el8_10, aspnetcore-runtime-dbg-9.0 9.0.21-1.el8_10, aspnetcore-targeting-pack-10.0 10.0.13-1.el8_10, aspnetcore-targeting-pack-8.0 8.0.32-2.el8_10, aspnetcore-targeting-pack-9.0 9.0.21-1.el8_10, dotnet 10.0.113-1.el8_10, dotnet-apphost-pack-10.0 10.0.13-1.el8_10, dotnet-apphost-pack-8.0 8.0.32-2.el8_10, dotnet-apphost-pack-9.0 9.0.21-1.el8_10, dotnet-hostfxr-10.0 10.0.13-1.el8_10, dotnet-hostfxr-8.0 8.0.32-2.el8_10, dotnet-hostfxr-9.0 9.0.21-1.el8_10, dotnet-runtime-10.0 10.0.13-1.el8_10, dotnet-runtime-8.0 8.0.32-2.el8_10, dotnet-runtime-9.0 9.0.21-1.el8_10, dotnet-runtime-dbg-10.0 10.0.13-1.el8_10, dotnet-runtime-dbg-8.0 8.0.32-2.el8_10, dotnet-runtime-dbg-9.0 9.0.21-1.el8_10, dotnet-sdk-10.0 10.0.113-1.el8_10, dotnet-sdk-10.0-source-built-artifacts 10.0.113-1.el8_10, dotnet-sdk-8.0 8.0.132-2.el8_10, dotnet-sdk-8.0-source-built-artifacts 8.0.132-2.el8_10, dotnet-sdk-9.0 9.0.122-1.el8_10, dotnet-sdk-9.0-source-built-artifacts 9.0.122-1.el8_10, dotnet-sdk-aot-10.0 10.0.113-1.el8_10, dotnet-sdk-aot-9.0 9.0.122-1.el8_10, dotnet-sdk-dbg-10.0 10.0.113-1.el8_10, dotnet-sdk-dbg-8.0 8.0.132-2.el8_10, dotnet-sdk-dbg-9.0 9.0.122-1.el8_10, dotnet-targeting-pack-10.0 10.0.13-1.el8_10, dotnet-targeting-pack-8.0 8.0.32-2.el8_10, dotnet-targeting-pack-9.0 9.0.21-1.el8_10, dotnet-templates-10.0 10.0.113-1.el8_10, dotnet-templates-8.0 8.0.132-2.el8_10, dotnet-templates-9.0 9.0.122-1.el8_10, netstandard-targeting-pack-2.1 9.0.122-1.el8_10.", "date_published": "2026-10-13T19:01:16Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96237/fixed/almalinux-9", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96237/", "title": "CVE-2026-96237 · Microsoft .NET 10.0 runtime · fixed in AlmaLinux 9 (aspnetcore-runtime-10.0 10.0.13-1.el9_8 and 39 more)", "content_text": "Fixed versions: aspnetcore-runtime-10.0 10.0.13-1.el9_8, aspnetcore-runtime-8.0 8.0.32-1.el9_8, aspnetcore-runtime-9.0 9.0.21-1.el9_8, aspnetcore-runtime-dbg-10.0 10.0.13-1.el9_8, aspnetcore-runtime-dbg-8.0 8.0.32-1.el9_8, aspnetcore-runtime-dbg-9.0 9.0.21-1.el9_8, aspnetcore-targeting-pack-10.0 10.0.13-1.el9_8, aspnetcore-targeting-pack-8.0 8.0.32-1.el9_8, aspnetcore-targeting-pack-9.0 9.0.21-1.el9_8, dotnet-apphost-pack-10.0 10.0.13-1.el9_8, dotnet-apphost-pack-8.0 8.0.32-1.el9_8, dotnet-apphost-pack-9.0 9.0.21-1.el9_8, dotnet-host 10.0.13-1.el9_8, dotnet-hostfxr-10.0 10.0.13-1.el9_8, dotnet-hostfxr-8.0 8.0.32-1.el9_8, dotnet-hostfxr-9.0 9.0.21-1.el9_8, dotnet-runtime-10.0 10.0.13-1.el9_8, dotnet-runtime-8.0 8.0.32-1.el9_8, dotnet-runtime-9.0 9.0.21-1.el9_8, dotnet-runtime-dbg-10.0 10.0.13-1.el9_8, dotnet-runtime-dbg-8.0 8.0.32-1.el9_8, dotnet-runtime-dbg-9.0 9.0.21-1.el9_8, dotnet-sdk-10.0 10.0.113-1.el9_8, dotnet-sdk-10.0-source-built-artifacts 10.0.113-1.el9_8, dotnet-sdk-8.0 8.0.132-1.el9_8, dotnet-sdk-8.0-source-built-artifacts 8.0.132-1.el9_8, dotnet-sdk-9.0 9.0.122-1.el9_8, dotnet-sdk-9.0-source-built-artifacts 9.0.122-1.el9_8, dotnet-sdk-aot-10.0 10.0.113-1.el9_8, dotnet-sdk-aot-9.0 9.0.122-1.el9_8, dotnet-sdk-dbg-10.0 10.0.113-1.el9_8, dotnet-sdk-dbg-8.0 8.0.132-1.el9_8, dotnet-sdk-dbg-9.0 9.0.122-1.el9_8, dotnet-targeting-pack-10.0 10.0.13-1.el9_8, dotnet-targeting-pack-8.0 8.0.32-1.el9_8, dotnet-targeting-pack-9.0 9.0.21-1.el9_8, dotnet-templates-10.0 10.0.113-1.el9_8, dotnet-templates-8.0 8.0.132-1.el9_8, dotnet-templates-9.0 9.0.122-1.el9_8, netstandard-targeting-pack-2.1 9.0.122-1.el9_8.", "date_published": "2026-10-13T19:01:16Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96237/fixed/rocky-linux-10", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96237/", "title": "CVE-2026-96237 · Microsoft .NET 10.0 runtime · fixed in Rocky Linux 10 (dotnet10.0 0:10.0.113-1.el10_2 and 2 more)", "content_text": "Fixed versions: dotnet10.0 0:10.0.113-1.el10_2, dotnet8.0 0:8.0.132-1.el10_2, dotnet9.0 0:9.0.122-1.el10_2.", "date_published": "2026-10-13T19:01:16Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96237/fixed/rocky-linux-8", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96237/", "title": "CVE-2026-96237 · Microsoft .NET 10.0 runtime · fixed in Rocky Linux 8 (dotnet10.0 0:10.0.113-1.el8_10 and 2 more)", "content_text": "Fixed versions: dotnet10.0 0:10.0.113-1.el8_10, dotnet8.0 0:8.0.132-2.el8_10, dotnet9.0 0:9.0.122-1.el8_10.", "date_published": "2026-10-13T19:01:16Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96237/fixed/rocky-linux-9", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96237/", "title": "CVE-2026-96237 · Microsoft .NET 10.0 runtime · fixed in Rocky Linux 9 (dotnet10.0 0:10.0.113-1.el9_8 and 2 more)", "content_text": "Fixed versions: dotnet10.0 0:10.0.113-1.el9_8, dotnet8.0 0:8.0.132-1.el9_8, dotnet9.0 0:9.0.122-1.el9_8.", "date_published": "2026-10-13T19:01:16Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96237/fixed/ubuntu-22.04-lts", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96237/", "title": "CVE-2026-96237 · Microsoft .NET 10.0 runtime · fixed in Ubuntu 22.04 LTS (dotnet8 8.0.132-8.0.32-0ubuntu1~22.04.1)", "content_text": "Fixed versions: dotnet8 8.0.132-8.0.32-0ubuntu1~22.04.1.", "date_published": "2026-10-13T19:01:16Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96237/fixed/ubuntu-24.04-lts", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96237/", "title": "CVE-2026-96237 · Microsoft .NET 10.0 runtime · fixed in Ubuntu 24.04 LTS (dotnet10 10.0.113-10.0.13-0ubuntu1~24.04.1 and 1 more)", "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~24.04.1, dotnet8 8.0.132-8.0.32-0ubuntu1~24.04.1.", "date_published": "2026-10-13T19:01:16Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96237/fixed/ubuntu-26.04-lts", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96237/", "title": "CVE-2026-96237 · Microsoft .NET 10.0 runtime · fixed in Ubuntu 26.04 LTS (dotnet10 10.0.113-10.0.13-0ubuntu1~26.04.1)", "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~26.04.1.", "date_published": "2026-10-13T19:01:16Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96237/fixed/ubuntu-26.10", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96237/", "title": "CVE-2026-96237 · Microsoft .NET 10.0 runtime · fixed in Ubuntu 26.10 (dotnet10 10.0.113-10.0.13-0ubuntu1~26.10.1 and 1 more)", "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~26.10.1, dotnet11 11.0.100-11.0.0~rc2-0ubuntu1~26.10.1.", "date_published": "2026-10-13T19:01:16Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96235/disclosed", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96235/", "title": "CVE-2026-96235 · Microsoft .NET 10.0 runtime · disclosed", "content_text": "Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.", "date_published": "2026-10-13T19:01:16Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96235/fixed/nuget", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96235/", "title": "CVE-2026-96235 · Microsoft .NET 10.0 runtime · fixed upstream (NuGet)", "content_text": "Fixed versions: Microsoft.WindowsDesktop.App.Runtime.win-arm64 10.0.13, Microsoft.WindowsDesktop.App.Runtime.win-arm64 11.0.0-rc.2, Microsoft.WindowsDesktop.App.Runtime.win-arm64 8.0.32, Microsoft.WindowsDesktop.App.Runtime.win-arm64 9.0.21, Microsoft.WindowsDesktop.App.Runtime.win-x64 10.0.13, Microsoft.WindowsDesktop.App.Runtime.win-x64 11.0.0-rc.2, Microsoft.WindowsDesktop.App.Runtime.win-x64 8.0.32, Microsoft.WindowsDesktop.App.Runtime.win-x64 9.0.21, Microsoft.WindowsDesktop.App.Runtime.win-x86 10.0.13, Microsoft.WindowsDesktop.App.Runtime.win-x86 11.0.0-rc.2, Microsoft.WindowsDesktop.App.Runtime.win-x86 8.0.32, Microsoft.WindowsDesktop.App.Runtime.win-x86 9.0.21.", "date_published": "2026-10-13T19:01:16Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96232/disclosed", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96232/", "title": "CVE-2026-96232 · Microsoft .NET 10.0 runtime · disclosed", "content_text": "Out-of-bounds read in .NET allows an unauthorized attacker to disclose information over a network.", "date_published": "2026-10-13T19:01:16Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96232/fixed/nuget", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96232/", "title": "CVE-2026-96232 · Microsoft .NET 10.0 runtime · fixed upstream (NuGet)", "content_text": "Fixed versions: Microsoft.WindowsDesktop.App.Runtime.win-arm64 10.0.13, Microsoft.WindowsDesktop.App.Runtime.win-arm64 11.0.0-rc.2, Microsoft.WindowsDesktop.App.Runtime.win-arm64 8.0.32, Microsoft.WindowsDesktop.App.Runtime.win-arm64 9.0.21, Microsoft.WindowsDesktop.App.Runtime.win-x64 10.0.13, Microsoft.WindowsDesktop.App.Runtime.win-x64 11.0.0-rc.2, Microsoft.WindowsDesktop.App.Runtime.win-x64 8.0.32, Microsoft.WindowsDesktop.App.Runtime.win-x64 9.0.21, Microsoft.WindowsDesktop.App.Runtime.win-x86 10.0.13, Microsoft.WindowsDesktop.App.Runtime.win-x86 11.0.0-rc.2, Microsoft.WindowsDesktop.App.Runtime.win-x86 8.0.32, Microsoft.WindowsDesktop.App.Runtime.win-x86 9.0.21.", "date_published": "2026-10-13T19:01:16Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96233/disclosed", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96233/", "title": "CVE-2026-96233 · Microsoft .NET 10.0 runtime · disclosed", "content_text": "Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network.", "date_published": "2026-10-13T19:01:16Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96233/fixed/almalinux-10", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96233/", "title": "CVE-2026-96233 · Microsoft .NET 10.0 runtime · fixed in AlmaLinux 10 (aspnetcore-runtime-10.0 10.0.13-1.el10_2 and 39 more)", "content_text": "Fixed versions: aspnetcore-runtime-10.0 10.0.13-1.el10_2, aspnetcore-runtime-8.0 8.0.32-1.el10_2, aspnetcore-runtime-9.0 9.0.21-1.el10_2, aspnetcore-runtime-dbg-10.0 10.0.13-1.el10_2, aspnetcore-runtime-dbg-8.0 8.0.32-1.el10_2, aspnetcore-runtime-dbg-9.0 9.0.21-1.el10_2, aspnetcore-targeting-pack-10.0 10.0.13-1.el10_2, aspnetcore-targeting-pack-8.0 8.0.32-1.el10_2, aspnetcore-targeting-pack-9.0 9.0.21-1.el10_2, dotnet-apphost-pack-10.0 10.0.13-1.el10_2, dotnet-apphost-pack-8.0 8.0.32-1.el10_2, dotnet-apphost-pack-9.0 9.0.21-1.el10_2, dotnet-host 10.0.13-1.el10_2, dotnet-hostfxr-10.0 10.0.13-1.el10_2, dotnet-hostfxr-8.0 8.0.32-1.el10_2, dotnet-hostfxr-9.0 9.0.21-1.el10_2, dotnet-runtime-10.0 10.0.13-1.el10_2, dotnet-runtime-8.0 8.0.32-1.el10_2, dotnet-runtime-9.0 9.0.21-1.el10_2, dotnet-runtime-dbg-10.0 10.0.13-1.el10_2, dotnet-runtime-dbg-8.0 8.0.32-1.el10_2, dotnet-runtime-dbg-9.0 9.0.21-1.el10_2, dotnet-sdk-10.0 10.0.113-1.el10_2, dotnet-sdk-10.0-source-built-artifacts 10.0.113-1.el10_2, dotnet-sdk-8.0 8.0.132-1.el10_2, dotnet-sdk-8.0-source-built-artifacts 8.0.132-1.el10_2, dotnet-sdk-9.0 9.0.122-1.el10_2, dotnet-sdk-9.0-source-built-artifacts 9.0.122-1.el10_2, dotnet-sdk-aot-10.0 10.0.113-1.el10_2, dotnet-sdk-aot-9.0 9.0.122-1.el10_2, dotnet-sdk-dbg-10.0 10.0.113-1.el10_2, dotnet-sdk-dbg-8.0 8.0.132-1.el10_2, dotnet-sdk-dbg-9.0 9.0.122-1.el10_2, dotnet-targeting-pack-10.0 10.0.13-1.el10_2, dotnet-targeting-pack-8.0 8.0.32-1.el10_2, dotnet-targeting-pack-9.0 9.0.21-1.el10_2, dotnet-templates-10.0 10.0.113-1.el10_2, dotnet-templates-8.0 8.0.132-1.el10_2, dotnet-templates-9.0 9.0.122-1.el10_2, netstandard-targeting-pack-2.1 9.0.122-1.el10_2.", "date_published": "2026-10-13T19:01:16Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96233/fixed/almalinux-8", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96233/", "title": "CVE-2026-96233 · Microsoft .NET 10.0 runtime · fixed in AlmaLinux 8 (aspnetcore-runtime-10.0 10.0.13-1.el8_10 and 39 more)", "content_text": "Fixed versions: aspnetcore-runtime-10.0 10.0.13-1.el8_10, aspnetcore-runtime-8.0 8.0.32-2.el8_10, aspnetcore-runtime-9.0 9.0.21-1.el8_10, aspnetcore-runtime-dbg-10.0 10.0.13-1.el8_10, aspnetcore-runtime-dbg-8.0 8.0.32-2.el8_10, aspnetcore-runtime-dbg-9.0 9.0.21-1.el8_10, aspnetcore-targeting-pack-10.0 10.0.13-1.el8_10, aspnetcore-targeting-pack-8.0 8.0.32-2.el8_10, aspnetcore-targeting-pack-9.0 9.0.21-1.el8_10, dotnet 10.0.113-1.el8_10, dotnet-apphost-pack-10.0 10.0.13-1.el8_10, dotnet-apphost-pack-8.0 8.0.32-2.el8_10, dotnet-apphost-pack-9.0 9.0.21-1.el8_10, dotnet-hostfxr-10.0 10.0.13-1.el8_10, dotnet-hostfxr-8.0 8.0.32-2.el8_10, dotnet-hostfxr-9.0 9.0.21-1.el8_10, dotnet-runtime-10.0 10.0.13-1.el8_10, dotnet-runtime-8.0 8.0.32-2.el8_10, dotnet-runtime-9.0 9.0.21-1.el8_10, dotnet-runtime-dbg-10.0 10.0.13-1.el8_10, dotnet-runtime-dbg-8.0 8.0.32-2.el8_10, dotnet-runtime-dbg-9.0 9.0.21-1.el8_10, dotnet-sdk-10.0 10.0.113-1.el8_10, dotnet-sdk-10.0-source-built-artifacts 10.0.113-1.el8_10, dotnet-sdk-8.0 8.0.132-2.el8_10, dotnet-sdk-8.0-source-built-artifacts 8.0.132-2.el8_10, dotnet-sdk-9.0 9.0.122-1.el8_10, dotnet-sdk-9.0-source-built-artifacts 9.0.122-1.el8_10, dotnet-sdk-aot-10.0 10.0.113-1.el8_10, dotnet-sdk-aot-9.0 9.0.122-1.el8_10, dotnet-sdk-dbg-10.0 10.0.113-1.el8_10, dotnet-sdk-dbg-8.0 8.0.132-2.el8_10, dotnet-sdk-dbg-9.0 9.0.122-1.el8_10, dotnet-targeting-pack-10.0 10.0.13-1.el8_10, dotnet-targeting-pack-8.0 8.0.32-2.el8_10, dotnet-targeting-pack-9.0 9.0.21-1.el8_10, dotnet-templates-10.0 10.0.113-1.el8_10, dotnet-templates-8.0 8.0.132-2.el8_10, dotnet-templates-9.0 9.0.122-1.el8_10, netstandard-targeting-pack-2.1 9.0.122-1.el8_10.", "date_published": "2026-10-13T19:01:16Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96233/fixed/almalinux-9", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96233/", "title": "CVE-2026-96233 · Microsoft .NET 10.0 runtime · fixed in AlmaLinux 9 (aspnetcore-runtime-10.0 10.0.13-1.el9_8 and 39 more)", "content_text": "Fixed versions: aspnetcore-runtime-10.0 10.0.13-1.el9_8, aspnetcore-runtime-8.0 8.0.32-1.el9_8, aspnetcore-runtime-9.0 9.0.21-1.el9_8, aspnetcore-runtime-dbg-10.0 10.0.13-1.el9_8, aspnetcore-runtime-dbg-8.0 8.0.32-1.el9_8, aspnetcore-runtime-dbg-9.0 9.0.21-1.el9_8, aspnetcore-targeting-pack-10.0 10.0.13-1.el9_8, aspnetcore-targeting-pack-8.0 8.0.32-1.el9_8, aspnetcore-targeting-pack-9.0 9.0.21-1.el9_8, dotnet-apphost-pack-10.0 10.0.13-1.el9_8, dotnet-apphost-pack-8.0 8.0.32-1.el9_8, dotnet-apphost-pack-9.0 9.0.21-1.el9_8, dotnet-host 10.0.13-1.el9_8, dotnet-hostfxr-10.0 10.0.13-1.el9_8, dotnet-hostfxr-8.0 8.0.32-1.el9_8, dotnet-hostfxr-9.0 9.0.21-1.el9_8, dotnet-runtime-10.0 10.0.13-1.el9_8, dotnet-runtime-8.0 8.0.32-1.el9_8, dotnet-runtime-9.0 9.0.21-1.el9_8, dotnet-runtime-dbg-10.0 10.0.13-1.el9_8, dotnet-runtime-dbg-8.0 8.0.32-1.el9_8, dotnet-runtime-dbg-9.0 9.0.21-1.el9_8, dotnet-sdk-10.0 10.0.113-1.el9_8, dotnet-sdk-10.0-source-built-artifacts 10.0.113-1.el9_8, dotnet-sdk-8.0 8.0.132-1.el9_8, dotnet-sdk-8.0-source-built-artifacts 8.0.132-1.el9_8, dotnet-sdk-9.0 9.0.122-1.el9_8, dotnet-sdk-9.0-source-built-artifacts 9.0.122-1.el9_8, dotnet-sdk-aot-10.0 10.0.113-1.el9_8, dotnet-sdk-aot-9.0 9.0.122-1.el9_8, dotnet-sdk-dbg-10.0 10.0.113-1.el9_8, dotnet-sdk-dbg-8.0 8.0.132-1.el9_8, dotnet-sdk-dbg-9.0 9.0.122-1.el9_8, dotnet-targeting-pack-10.0 10.0.13-1.el9_8, dotnet-targeting-pack-8.0 8.0.32-1.el9_8, dotnet-targeting-pack-9.0 9.0.21-1.el9_8, dotnet-templates-10.0 10.0.113-1.el9_8, dotnet-templates-8.0 8.0.132-1.el9_8, dotnet-templates-9.0 9.0.122-1.el9_8, netstandard-targeting-pack-2.1 9.0.122-1.el9_8.", "date_published": "2026-10-13T19:01:16Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96233/fixed/nuget", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96233/", "title": "CVE-2026-96233 · Microsoft .NET 10.0 runtime · fixed upstream (NuGet)", "content_text": "Fixed versions: Microsoft.NETCore.App.Runtime.linux-arm 10.0.13, Microsoft.NETCore.App.Runtime.linux-arm 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.linux-arm 8.0.32, Microsoft.NETCore.App.Runtime.linux-arm 9.0.21, Microsoft.NETCore.App.Runtime.linux-arm64 10.0.13, Microsoft.NETCore.App.Runtime.linux-arm64 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.linux-arm64 8.0.32, Microsoft.NETCore.App.Runtime.linux-arm64 9.0.21, Microsoft.NETCore.App.Runtime.linux-musl-arm 10.0.13, Microsoft.NETCore.App.Runtime.linux-musl-arm 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.linux-musl-arm 8.0.32, Microsoft.NETCore.App.Runtime.linux-musl-arm 9.0.21, Microsoft.NETCore.App.Runtime.linux-musl-arm64 10.0.13, Microsoft.NETCore.App.Runtime.linux-musl-arm64 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.linux-musl-arm64 8.0.32, Microsoft.NETCore.App.Runtime.linux-musl-arm64 9.0.21, Microsoft.NETCore.App.Runtime.linux-musl-x64 10.0.13, Microsoft.NETCore.App.Runtime.linux-musl-x64 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.linux-musl-x64 8.0.32, Microsoft.NETCore.App.Runtime.linux-musl-x64 9.0.21, Microsoft.NETCore.App.Runtime.linux-x64 10.0.13, Microsoft.NETCore.App.Runtime.linux-x64 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.linux-x64 8.0.32, Microsoft.NETCore.App.Runtime.linux-x64 9.0.21, Microsoft.NETCore.App.Runtime.osx-arm64 10.0.13, Microsoft.NETCore.App.Runtime.osx-arm64 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.osx-arm64 8.0.32, Microsoft.NETCore.App.Runtime.osx-arm64 9.0.21, Microsoft.NETCore.App.Runtime.osx-x64 10.0.13, Microsoft.NETCore.App.Runtime.osx-x64 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.osx-x64 8.0.32, Microsoft.NETCore.App.Runtime.osx-x64 9.0.21, Microsoft.NETCore.App.Runtime.win-arm 10.0.13, Microsoft.NETCore.App.Runtime.win-arm 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.win-arm 8.0.32, Microsoft.NETCore.App.Runtime.win-arm 9.0.21, Microsoft.NETCore.App.Runtime.win-arm64 10.0.13, Microsoft.NETCore.App.Runtime.win-arm64 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.win-arm64 8.0.32, Microsoft.NETCore.App.Runtime.win-arm64 9.0.21, Microsoft.NETCore.App.Runtime.win-x64 10.0.13, Microsoft.NETCore.App.Runtime.win-x64 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.win-x64 8.0.32, Microsoft.NETCore.App.Runtime.win-x64 9.0.21, Microsoft.NETCore.App.Runtime.win-x86 10.0.13, Microsoft.NETCore.App.Runtime.win-x86 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.win-x86 8.0.32, Microsoft.NETCore.App.Runtime.win-x86 9.0.21.", "date_published": "2026-10-13T19:01:16Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96233/fixed/rocky-linux-10", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96233/", "title": "CVE-2026-96233 · Microsoft .NET 10.0 runtime · fixed in Rocky Linux 10 (dotnet10.0 0:10.0.113-1.el10_2 and 2 more)", "content_text": "Fixed versions: dotnet10.0 0:10.0.113-1.el10_2, dotnet8.0 0:8.0.132-1.el10_2, dotnet9.0 0:9.0.122-1.el10_2.", "date_published": "2026-10-13T19:01:16Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96233/fixed/rocky-linux-8", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96233/", "title": "CVE-2026-96233 · Microsoft .NET 10.0 runtime · fixed in Rocky Linux 8 (dotnet10.0 0:10.0.113-1.el8_10 and 2 more)", "content_text": "Fixed versions: dotnet10.0 0:10.0.113-1.el8_10, dotnet8.0 0:8.0.132-2.el8_10, dotnet9.0 0:9.0.122-1.el8_10.", "date_published": "2026-10-13T19:01:16Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96233/fixed/rocky-linux-9", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96233/", "title": "CVE-2026-96233 · Microsoft .NET 10.0 runtime · fixed in Rocky Linux 9 (dotnet10.0 0:10.0.113-1.el9_8 and 2 more)", "content_text": "Fixed versions: dotnet10.0 0:10.0.113-1.el9_8, dotnet8.0 0:8.0.132-1.el9_8, dotnet9.0 0:9.0.122-1.el9_8.", "date_published": "2026-10-13T19:01:16Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96233/fixed/ubuntu-22.04-lts", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96233/", "title": "CVE-2026-96233 · Microsoft .NET 10.0 runtime · fixed in Ubuntu 22.04 LTS (dotnet8 8.0.132-8.0.32-0ubuntu1~22.04.1)", "content_text": "Fixed versions: dotnet8 8.0.132-8.0.32-0ubuntu1~22.04.1.", "date_published": "2026-10-13T19:01:16Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96233/fixed/ubuntu-24.04-lts", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96233/", "title": "CVE-2026-96233 · Microsoft .NET 10.0 runtime · fixed in Ubuntu 24.04 LTS (dotnet10 10.0.113-10.0.13-0ubuntu1~24.04.1 and 1 more)", "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~24.04.1, dotnet8 8.0.132-8.0.32-0ubuntu1~24.04.1.", "date_published": "2026-10-13T19:01:16Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96233/fixed/ubuntu-26.04-lts", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96233/", "title": "CVE-2026-96233 · Microsoft .NET 10.0 runtime · fixed in Ubuntu 26.04 LTS (dotnet10 10.0.113-10.0.13-0ubuntu1~26.04.1)", "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~26.04.1.", "date_published": "2026-10-13T19:01:16Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96233/fixed/ubuntu-26.10", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96233/", "title": "CVE-2026-96233 · Microsoft .NET 10.0 runtime · fixed in Ubuntu 26.10 (dotnet10 10.0.113-10.0.13-0ubuntu1~26.10.1 and 1 more)", "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~26.10.1, dotnet11 11.0.100-11.0.0~rc2-0ubuntu1~26.10.1.", "date_published": "2026-10-13T19:01:16Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96225/disclosed", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96225/", "title": "CVE-2026-96225 · Microsoft .NET 10.0 runtime · disclosed", "content_text": "Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.", "date_published": "2026-10-13T19:01:16Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96225/fixed/almalinux-10", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96225/", "title": "CVE-2026-96225 · Microsoft .NET 10.0 runtime · fixed in AlmaLinux 10 (aspnetcore-runtime-10.0 10.0.13-1.el10_2 and 39 more)", "content_text": "Fixed versions: aspnetcore-runtime-10.0 10.0.13-1.el10_2, aspnetcore-runtime-8.0 8.0.32-1.el10_2, aspnetcore-runtime-9.0 9.0.21-1.el10_2, aspnetcore-runtime-dbg-10.0 10.0.13-1.el10_2, aspnetcore-runtime-dbg-8.0 8.0.32-1.el10_2, aspnetcore-runtime-dbg-9.0 9.0.21-1.el10_2, aspnetcore-targeting-pack-10.0 10.0.13-1.el10_2, aspnetcore-targeting-pack-8.0 8.0.32-1.el10_2, aspnetcore-targeting-pack-9.0 9.0.21-1.el10_2, dotnet-apphost-pack-10.0 10.0.13-1.el10_2, dotnet-apphost-pack-8.0 8.0.32-1.el10_2, dotnet-apphost-pack-9.0 9.0.21-1.el10_2, dotnet-host 10.0.13-1.el10_2, dotnet-hostfxr-10.0 10.0.13-1.el10_2, dotnet-hostfxr-8.0 8.0.32-1.el10_2, dotnet-hostfxr-9.0 9.0.21-1.el10_2, dotnet-runtime-10.0 10.0.13-1.el10_2, dotnet-runtime-8.0 8.0.32-1.el10_2, dotnet-runtime-9.0 9.0.21-1.el10_2, dotnet-runtime-dbg-10.0 10.0.13-1.el10_2, dotnet-runtime-dbg-8.0 8.0.32-1.el10_2, dotnet-runtime-dbg-9.0 9.0.21-1.el10_2, dotnet-sdk-10.0 10.0.113-1.el10_2, dotnet-sdk-10.0-source-built-artifacts 10.0.113-1.el10_2, dotnet-sdk-8.0 8.0.132-1.el10_2, dotnet-sdk-8.0-source-built-artifacts 8.0.132-1.el10_2, dotnet-sdk-9.0 9.0.122-1.el10_2, dotnet-sdk-9.0-source-built-artifacts 9.0.122-1.el10_2, dotnet-sdk-aot-10.0 10.0.113-1.el10_2, dotnet-sdk-aot-9.0 9.0.122-1.el10_2, dotnet-sdk-dbg-10.0 10.0.113-1.el10_2, dotnet-sdk-dbg-8.0 8.0.132-1.el10_2, dotnet-sdk-dbg-9.0 9.0.122-1.el10_2, dotnet-targeting-pack-10.0 10.0.13-1.el10_2, dotnet-targeting-pack-8.0 8.0.32-1.el10_2, dotnet-targeting-pack-9.0 9.0.21-1.el10_2, dotnet-templates-10.0 10.0.113-1.el10_2, dotnet-templates-8.0 8.0.132-1.el10_2, dotnet-templates-9.0 9.0.122-1.el10_2, netstandard-targeting-pack-2.1 9.0.122-1.el10_2.", "date_published": "2026-10-13T19:01:16Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96225/fixed/almalinux-8", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96225/", "title": "CVE-2026-96225 · Microsoft .NET 10.0 runtime · fixed in AlmaLinux 8 (aspnetcore-runtime-10.0 10.0.13-1.el8_10 and 39 more)", "content_text": "Fixed versions: aspnetcore-runtime-10.0 10.0.13-1.el8_10, aspnetcore-runtime-8.0 8.0.32-2.el8_10, aspnetcore-runtime-9.0 9.0.21-1.el8_10, aspnetcore-runtime-dbg-10.0 10.0.13-1.el8_10, aspnetcore-runtime-dbg-8.0 8.0.32-2.el8_10, aspnetcore-runtime-dbg-9.0 9.0.21-1.el8_10, aspnetcore-targeting-pack-10.0 10.0.13-1.el8_10, aspnetcore-targeting-pack-8.0 8.0.32-2.el8_10, aspnetcore-targeting-pack-9.0 9.0.21-1.el8_10, dotnet 10.0.113-1.el8_10, dotnet-apphost-pack-10.0 10.0.13-1.el8_10, dotnet-apphost-pack-8.0 8.0.32-2.el8_10, dotnet-apphost-pack-9.0 9.0.21-1.el8_10, dotnet-hostfxr-10.0 10.0.13-1.el8_10, dotnet-hostfxr-8.0 8.0.32-2.el8_10, dotnet-hostfxr-9.0 9.0.21-1.el8_10, dotnet-runtime-10.0 10.0.13-1.el8_10, dotnet-runtime-8.0 8.0.32-2.el8_10, dotnet-runtime-9.0 9.0.21-1.el8_10, dotnet-runtime-dbg-10.0 10.0.13-1.el8_10, dotnet-runtime-dbg-8.0 8.0.32-2.el8_10, dotnet-runtime-dbg-9.0 9.0.21-1.el8_10, dotnet-sdk-10.0 10.0.113-1.el8_10, dotnet-sdk-10.0-source-built-artifacts 10.0.113-1.el8_10, dotnet-sdk-8.0 8.0.132-2.el8_10, dotnet-sdk-8.0-source-built-artifacts 8.0.132-2.el8_10, dotnet-sdk-9.0 9.0.122-1.el8_10, dotnet-sdk-9.0-source-built-artifacts 9.0.122-1.el8_10, dotnet-sdk-aot-10.0 10.0.113-1.el8_10, dotnet-sdk-aot-9.0 9.0.122-1.el8_10, dotnet-sdk-dbg-10.0 10.0.113-1.el8_10, dotnet-sdk-dbg-8.0 8.0.132-2.el8_10, dotnet-sdk-dbg-9.0 9.0.122-1.el8_10, dotnet-targeting-pack-10.0 10.0.13-1.el8_10, dotnet-targeting-pack-8.0 8.0.32-2.el8_10, dotnet-targeting-pack-9.0 9.0.21-1.el8_10, dotnet-templates-10.0 10.0.113-1.el8_10, dotnet-templates-8.0 8.0.132-2.el8_10, dotnet-templates-9.0 9.0.122-1.el8_10, netstandard-targeting-pack-2.1 9.0.122-1.el8_10.", "date_published": "2026-10-13T19:01:16Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96225/fixed/almalinux-9", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96225/", "title": "CVE-2026-96225 · Microsoft .NET 10.0 runtime · fixed in AlmaLinux 9 (aspnetcore-runtime-10.0 10.0.13-1.el9_8 and 39 more)", "content_text": "Fixed versions: aspnetcore-runtime-10.0 10.0.13-1.el9_8, aspnetcore-runtime-8.0 8.0.32-1.el9_8, aspnetcore-runtime-9.0 9.0.21-1.el9_8, aspnetcore-runtime-dbg-10.0 10.0.13-1.el9_8, aspnetcore-runtime-dbg-8.0 8.0.32-1.el9_8, aspnetcore-runtime-dbg-9.0 9.0.21-1.el9_8, aspnetcore-targeting-pack-10.0 10.0.13-1.el9_8, aspnetcore-targeting-pack-8.0 8.0.32-1.el9_8, aspnetcore-targeting-pack-9.0 9.0.21-1.el9_8, dotnet-apphost-pack-10.0 10.0.13-1.el9_8, dotnet-apphost-pack-8.0 8.0.32-1.el9_8, dotnet-apphost-pack-9.0 9.0.21-1.el9_8, dotnet-host 10.0.13-1.el9_8, dotnet-hostfxr-10.0 10.0.13-1.el9_8, dotnet-hostfxr-8.0 8.0.32-1.el9_8, dotnet-hostfxr-9.0 9.0.21-1.el9_8, dotnet-runtime-10.0 10.0.13-1.el9_8, dotnet-runtime-8.0 8.0.32-1.el9_8, dotnet-runtime-9.0 9.0.21-1.el9_8, dotnet-runtime-dbg-10.0 10.0.13-1.el9_8, dotnet-runtime-dbg-8.0 8.0.32-1.el9_8, dotnet-runtime-dbg-9.0 9.0.21-1.el9_8, dotnet-sdk-10.0 10.0.113-1.el9_8, dotnet-sdk-10.0-source-built-artifacts 10.0.113-1.el9_8, dotnet-sdk-8.0 8.0.132-1.el9_8, dotnet-sdk-8.0-source-built-artifacts 8.0.132-1.el9_8, dotnet-sdk-9.0 9.0.122-1.el9_8, dotnet-sdk-9.0-source-built-artifacts 9.0.122-1.el9_8, dotnet-sdk-aot-10.0 10.0.113-1.el9_8, dotnet-sdk-aot-9.0 9.0.122-1.el9_8, dotnet-sdk-dbg-10.0 10.0.113-1.el9_8, dotnet-sdk-dbg-8.0 8.0.132-1.el9_8, dotnet-sdk-dbg-9.0 9.0.122-1.el9_8, dotnet-targeting-pack-10.0 10.0.13-1.el9_8, dotnet-targeting-pack-8.0 8.0.32-1.el9_8, dotnet-targeting-pack-9.0 9.0.21-1.el9_8, dotnet-templates-10.0 10.0.113-1.el9_8, dotnet-templates-8.0 8.0.132-1.el9_8, dotnet-templates-9.0 9.0.122-1.el9_8, netstandard-targeting-pack-2.1 9.0.122-1.el9_8.", "date_published": "2026-10-13T19:01:16Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96225/fixed/nuget", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96225/", "title": "CVE-2026-96225 · Microsoft .NET 10.0 runtime · fixed upstream (NuGet)", "content_text": "Fixed versions: Microsoft.NETCore.App.Runtime.linux-arm 10.0.13, Microsoft.NETCore.App.Runtime.linux-arm 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.linux-arm 8.0.32, Microsoft.NETCore.App.Runtime.linux-arm 9.0.21, Microsoft.NETCore.App.Runtime.linux-arm64 10.0.13, Microsoft.NETCore.App.Runtime.linux-arm64 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.linux-arm64 8.0.32, Microsoft.NETCore.App.Runtime.linux-arm64 9.0.21, Microsoft.NETCore.App.Runtime.linux-musl-arm 10.0.13, Microsoft.NETCore.App.Runtime.linux-musl-arm 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.linux-musl-arm 8.0.32, Microsoft.NETCore.App.Runtime.linux-musl-arm 9.0.21, Microsoft.NETCore.App.Runtime.linux-musl-arm64 10.0.13, Microsoft.NETCore.App.Runtime.linux-musl-arm64 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.linux-musl-arm64 8.0.32, Microsoft.NETCore.App.Runtime.linux-musl-arm64 9.0.21, Microsoft.NETCore.App.Runtime.linux-musl-x64 10.0.13, Microsoft.NETCore.App.Runtime.linux-musl-x64 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.linux-musl-x64 8.0.32, Microsoft.NETCore.App.Runtime.linux-musl-x64 9.0.21, Microsoft.NETCore.App.Runtime.linux-x64 10.0.13, Microsoft.NETCore.App.Runtime.linux-x64 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.linux-x64 8.0.32, Microsoft.NETCore.App.Runtime.linux-x64 9.0.21, Microsoft.NETCore.App.Runtime.osx-arm64 10.0.13, Microsoft.NETCore.App.Runtime.osx-arm64 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.osx-arm64 8.0.32, Microsoft.NETCore.App.Runtime.osx-arm64 9.0.21, Microsoft.NETCore.App.Runtime.osx-x64 10.0.13, Microsoft.NETCore.App.Runtime.osx-x64 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.osx-x64 8.0.32, Microsoft.NETCore.App.Runtime.osx-x64 9.0.21.", "date_published": "2026-10-13T19:01:16Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96225/fixed/rocky-linux-10", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96225/", "title": "CVE-2026-96225 · Microsoft .NET 10.0 runtime · fixed in Rocky Linux 10 (dotnet10.0 0:10.0.113-1.el10_2 and 2 more)", "content_text": "Fixed versions: dotnet10.0 0:10.0.113-1.el10_2, dotnet8.0 0:8.0.132-1.el10_2, dotnet9.0 0:9.0.122-1.el10_2.", "date_published": "2026-10-13T19:01:16Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96225/fixed/rocky-linux-8", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96225/", "title": "CVE-2026-96225 · Microsoft .NET 10.0 runtime · fixed in Rocky Linux 8 (dotnet10.0 0:10.0.113-1.el8_10 and 2 more)", "content_text": "Fixed versions: dotnet10.0 0:10.0.113-1.el8_10, dotnet8.0 0:8.0.132-2.el8_10, dotnet9.0 0:9.0.122-1.el8_10.", "date_published": "2026-10-13T19:01:16Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96225/fixed/rocky-linux-9", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96225/", "title": "CVE-2026-96225 · Microsoft .NET 10.0 runtime · fixed in Rocky Linux 9 (dotnet10.0 0:10.0.113-1.el9_8 and 2 more)", "content_text": "Fixed versions: dotnet10.0 0:10.0.113-1.el9_8, dotnet8.0 0:8.0.132-1.el9_8, dotnet9.0 0:9.0.122-1.el9_8.", "date_published": "2026-10-13T19:01:16Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96225/fixed/ubuntu-22.04-lts", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96225/", "title": "CVE-2026-96225 · Microsoft .NET 10.0 runtime · fixed in Ubuntu 22.04 LTS (dotnet8 8.0.132-8.0.32-0ubuntu1~22.04.1)", "content_text": "Fixed versions: dotnet8 8.0.132-8.0.32-0ubuntu1~22.04.1.", "date_published": "2026-10-13T19:01:16Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96225/fixed/ubuntu-24.04-lts", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96225/", "title": "CVE-2026-96225 · Microsoft .NET 10.0 runtime · fixed in Ubuntu 24.04 LTS (dotnet10 10.0.113-10.0.13-0ubuntu1~24.04.1 and 1 more)", "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~24.04.1, dotnet8 8.0.132-8.0.32-0ubuntu1~24.04.1.", "date_published": "2026-10-13T19:01:16Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96225/fixed/ubuntu-26.04-lts", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96225/", "title": "CVE-2026-96225 · Microsoft .NET 10.0 runtime · fixed in Ubuntu 26.04 LTS (dotnet10 10.0.113-10.0.13-0ubuntu1~26.04.1)", "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~26.04.1.", "date_published": "2026-10-13T19:01:16Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96225/fixed/ubuntu-26.10", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96225/", "title": "CVE-2026-96225 · Microsoft .NET 10.0 runtime · fixed in Ubuntu 26.10 (dotnet10 10.0.113-10.0.13-0ubuntu1~26.10.1 and 1 more)", "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~26.10.1, dotnet11 11.0.100-11.0.0~rc2-0ubuntu1~26.10.1.", "date_published": "2026-10-13T19:01:16Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96231/disclosed", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96231/", "title": "CVE-2026-96231 · Microsoft .NET 10.0 runtime · disclosed", "content_text": "Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.", "date_published": "2026-10-13T19:01:16Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96231/fixed/almalinux-10", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96231/", "title": "CVE-2026-96231 · Microsoft .NET 10.0 runtime · fixed in AlmaLinux 10 (aspnetcore-runtime-10.0 10.0.13-1.el10_2 and 39 more)", "content_text": "Fixed versions: aspnetcore-runtime-10.0 10.0.13-1.el10_2, aspnetcore-runtime-8.0 8.0.32-1.el10_2, aspnetcore-runtime-9.0 9.0.21-1.el10_2, aspnetcore-runtime-dbg-10.0 10.0.13-1.el10_2, aspnetcore-runtime-dbg-8.0 8.0.32-1.el10_2, aspnetcore-runtime-dbg-9.0 9.0.21-1.el10_2, aspnetcore-targeting-pack-10.0 10.0.13-1.el10_2, aspnetcore-targeting-pack-8.0 8.0.32-1.el10_2, aspnetcore-targeting-pack-9.0 9.0.21-1.el10_2, dotnet-apphost-pack-10.0 10.0.13-1.el10_2, dotnet-apphost-pack-8.0 8.0.32-1.el10_2, dotnet-apphost-pack-9.0 9.0.21-1.el10_2, dotnet-host 10.0.13-1.el10_2, dotnet-hostfxr-10.0 10.0.13-1.el10_2, dotnet-hostfxr-8.0 8.0.32-1.el10_2, dotnet-hostfxr-9.0 9.0.21-1.el10_2, dotnet-runtime-10.0 10.0.13-1.el10_2, dotnet-runtime-8.0 8.0.32-1.el10_2, dotnet-runtime-9.0 9.0.21-1.el10_2, dotnet-runtime-dbg-10.0 10.0.13-1.el10_2, dotnet-runtime-dbg-8.0 8.0.32-1.el10_2, dotnet-runtime-dbg-9.0 9.0.21-1.el10_2, dotnet-sdk-10.0 10.0.113-1.el10_2, dotnet-sdk-10.0-source-built-artifacts 10.0.113-1.el10_2, dotnet-sdk-8.0 8.0.132-1.el10_2, dotnet-sdk-8.0-source-built-artifacts 8.0.132-1.el10_2, dotnet-sdk-9.0 9.0.122-1.el10_2, dotnet-sdk-9.0-source-built-artifacts 9.0.122-1.el10_2, dotnet-sdk-aot-10.0 10.0.113-1.el10_2, dotnet-sdk-aot-9.0 9.0.122-1.el10_2, dotnet-sdk-dbg-10.0 10.0.113-1.el10_2, dotnet-sdk-dbg-8.0 8.0.132-1.el10_2, dotnet-sdk-dbg-9.0 9.0.122-1.el10_2, dotnet-targeting-pack-10.0 10.0.13-1.el10_2, dotnet-targeting-pack-8.0 8.0.32-1.el10_2, dotnet-targeting-pack-9.0 9.0.21-1.el10_2, dotnet-templates-10.0 10.0.113-1.el10_2, dotnet-templates-8.0 8.0.132-1.el10_2, dotnet-templates-9.0 9.0.122-1.el10_2, netstandard-targeting-pack-2.1 9.0.122-1.el10_2.", "date_published": "2026-10-13T19:01:16Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96231/fixed/almalinux-8", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96231/", "title": "CVE-2026-96231 · Microsoft .NET 10.0 runtime · fixed in AlmaLinux 8 (aspnetcore-runtime-10.0 10.0.13-1.el8_10 and 39 more)", "content_text": "Fixed versions: aspnetcore-runtime-10.0 10.0.13-1.el8_10, aspnetcore-runtime-8.0 8.0.32-2.el8_10, aspnetcore-runtime-9.0 9.0.21-1.el8_10, aspnetcore-runtime-dbg-10.0 10.0.13-1.el8_10, aspnetcore-runtime-dbg-8.0 8.0.32-2.el8_10, aspnetcore-runtime-dbg-9.0 9.0.21-1.el8_10, aspnetcore-targeting-pack-10.0 10.0.13-1.el8_10, aspnetcore-targeting-pack-8.0 8.0.32-2.el8_10, aspnetcore-targeting-pack-9.0 9.0.21-1.el8_10, dotnet 10.0.113-1.el8_10, dotnet-apphost-pack-10.0 10.0.13-1.el8_10, dotnet-apphost-pack-8.0 8.0.32-2.el8_10, dotnet-apphost-pack-9.0 9.0.21-1.el8_10, dotnet-hostfxr-10.0 10.0.13-1.el8_10, dotnet-hostfxr-8.0 8.0.32-2.el8_10, dotnet-hostfxr-9.0 9.0.21-1.el8_10, dotnet-runtime-10.0 10.0.13-1.el8_10, dotnet-runtime-8.0 8.0.32-2.el8_10, dotnet-runtime-9.0 9.0.21-1.el8_10, dotnet-runtime-dbg-10.0 10.0.13-1.el8_10, dotnet-runtime-dbg-8.0 8.0.32-2.el8_10, dotnet-runtime-dbg-9.0 9.0.21-1.el8_10, dotnet-sdk-10.0 10.0.113-1.el8_10, dotnet-sdk-10.0-source-built-artifacts 10.0.113-1.el8_10, dotnet-sdk-8.0 8.0.132-2.el8_10, dotnet-sdk-8.0-source-built-artifacts 8.0.132-2.el8_10, dotnet-sdk-9.0 9.0.122-1.el8_10, dotnet-sdk-9.0-source-built-artifacts 9.0.122-1.el8_10, dotnet-sdk-aot-10.0 10.0.113-1.el8_10, dotnet-sdk-aot-9.0 9.0.122-1.el8_10, dotnet-sdk-dbg-10.0 10.0.113-1.el8_10, dotnet-sdk-dbg-8.0 8.0.132-2.el8_10, dotnet-sdk-dbg-9.0 9.0.122-1.el8_10, dotnet-targeting-pack-10.0 10.0.13-1.el8_10, dotnet-targeting-pack-8.0 8.0.32-2.el8_10, dotnet-targeting-pack-9.0 9.0.21-1.el8_10, dotnet-templates-10.0 10.0.113-1.el8_10, dotnet-templates-8.0 8.0.132-2.el8_10, dotnet-templates-9.0 9.0.122-1.el8_10, netstandard-targeting-pack-2.1 9.0.122-1.el8_10.", "date_published": "2026-10-13T19:01:16Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96231/fixed/almalinux-9", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96231/", "title": "CVE-2026-96231 · Microsoft .NET 10.0 runtime · fixed in AlmaLinux 9 (aspnetcore-runtime-10.0 10.0.13-1.el9_8 and 39 more)", "content_text": "Fixed versions: aspnetcore-runtime-10.0 10.0.13-1.el9_8, aspnetcore-runtime-8.0 8.0.32-1.el9_8, aspnetcore-runtime-9.0 9.0.21-1.el9_8, aspnetcore-runtime-dbg-10.0 10.0.13-1.el9_8, aspnetcore-runtime-dbg-8.0 8.0.32-1.el9_8, aspnetcore-runtime-dbg-9.0 9.0.21-1.el9_8, aspnetcore-targeting-pack-10.0 10.0.13-1.el9_8, aspnetcore-targeting-pack-8.0 8.0.32-1.el9_8, aspnetcore-targeting-pack-9.0 9.0.21-1.el9_8, dotnet-apphost-pack-10.0 10.0.13-1.el9_8, dotnet-apphost-pack-8.0 8.0.32-1.el9_8, dotnet-apphost-pack-9.0 9.0.21-1.el9_8, dotnet-host 10.0.13-1.el9_8, dotnet-hostfxr-10.0 10.0.13-1.el9_8, dotnet-hostfxr-8.0 8.0.32-1.el9_8, dotnet-hostfxr-9.0 9.0.21-1.el9_8, dotnet-runtime-10.0 10.0.13-1.el9_8, dotnet-runtime-8.0 8.0.32-1.el9_8, dotnet-runtime-9.0 9.0.21-1.el9_8, dotnet-runtime-dbg-10.0 10.0.13-1.el9_8, dotnet-runtime-dbg-8.0 8.0.32-1.el9_8, dotnet-runtime-dbg-9.0 9.0.21-1.el9_8, dotnet-sdk-10.0 10.0.113-1.el9_8, dotnet-sdk-10.0-source-built-artifacts 10.0.113-1.el9_8, dotnet-sdk-8.0 8.0.132-1.el9_8, dotnet-sdk-8.0-source-built-artifacts 8.0.132-1.el9_8, dotnet-sdk-9.0 9.0.122-1.el9_8, dotnet-sdk-9.0-source-built-artifacts 9.0.122-1.el9_8, dotnet-sdk-aot-10.0 10.0.113-1.el9_8, dotnet-sdk-aot-9.0 9.0.122-1.el9_8, dotnet-sdk-dbg-10.0 10.0.113-1.el9_8, dotnet-sdk-dbg-8.0 8.0.132-1.el9_8, dotnet-sdk-dbg-9.0 9.0.122-1.el9_8, dotnet-targeting-pack-10.0 10.0.13-1.el9_8, dotnet-targeting-pack-8.0 8.0.32-1.el9_8, dotnet-targeting-pack-9.0 9.0.21-1.el9_8, dotnet-templates-10.0 10.0.113-1.el9_8, dotnet-templates-8.0 8.0.132-1.el9_8, dotnet-templates-9.0 9.0.122-1.el9_8, netstandard-targeting-pack-2.1 9.0.122-1.el9_8.", "date_published": "2026-10-13T19:01:16Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96231/fixed/nuget", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96231/", "title": "CVE-2026-96231 · Microsoft .NET 10.0 runtime · fixed upstream (NuGet)", "content_text": "Fixed versions: Microsoft.NETCore.App.Runtime.linux-arm 10.0.13, Microsoft.NETCore.App.Runtime.linux-arm 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.linux-arm 8.0.32, Microsoft.NETCore.App.Runtime.linux-arm 9.0.21, Microsoft.NETCore.App.Runtime.linux-arm64 10.0.13, Microsoft.NETCore.App.Runtime.linux-arm64 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.linux-arm64 8.0.32, Microsoft.NETCore.App.Runtime.linux-arm64 9.0.21, Microsoft.NETCore.App.Runtime.linux-musl-arm 10.0.13, Microsoft.NETCore.App.Runtime.linux-musl-arm 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.linux-musl-arm 8.0.32, Microsoft.NETCore.App.Runtime.linux-musl-arm 9.0.21, Microsoft.NETCore.App.Runtime.linux-musl-arm64 10.0.13, Microsoft.NETCore.App.Runtime.linux-musl-arm64 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.linux-musl-arm64 8.0.32, Microsoft.NETCore.App.Runtime.linux-musl-arm64 9.0.21, Microsoft.NETCore.App.Runtime.linux-musl-x64 10.0.13, Microsoft.NETCore.App.Runtime.linux-musl-x64 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.linux-musl-x64 8.0.32, Microsoft.NETCore.App.Runtime.linux-musl-x64 9.0.21, Microsoft.NETCore.App.Runtime.linux-x64 10.0.13, Microsoft.NETCore.App.Runtime.linux-x64 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.linux-x64 8.0.32, Microsoft.NETCore.App.Runtime.linux-x64 9.0.21, Microsoft.NETCore.App.Runtime.osx-arm64 10.0.13, Microsoft.NETCore.App.Runtime.osx-arm64 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.osx-arm64 8.0.32, Microsoft.NETCore.App.Runtime.osx-arm64 9.0.21, Microsoft.NETCore.App.Runtime.osx-x64 10.0.13, Microsoft.NETCore.App.Runtime.osx-x64 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.osx-x64 8.0.32, Microsoft.NETCore.App.Runtime.osx-x64 9.0.21.", "date_published": "2026-10-13T19:01:16Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96231/fixed/rocky-linux-10", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96231/", "title": "CVE-2026-96231 · Microsoft .NET 10.0 runtime · fixed in Rocky Linux 10 (dotnet10.0 0:10.0.113-1.el10_2 and 2 more)", "content_text": "Fixed versions: dotnet10.0 0:10.0.113-1.el10_2, dotnet8.0 0:8.0.132-1.el10_2, dotnet9.0 0:9.0.122-1.el10_2.", "date_published": "2026-10-13T19:01:16Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96231/fixed/rocky-linux-8", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96231/", "title": "CVE-2026-96231 · Microsoft .NET 10.0 runtime · fixed in Rocky Linux 8 (dotnet10.0 0:10.0.113-1.el8_10 and 2 more)", "content_text": "Fixed versions: dotnet10.0 0:10.0.113-1.el8_10, dotnet8.0 0:8.0.132-2.el8_10, dotnet9.0 0:9.0.122-1.el8_10.", "date_published": "2026-10-13T19:01:16Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96231/fixed/rocky-linux-9", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96231/", "title": "CVE-2026-96231 · Microsoft .NET 10.0 runtime · fixed in Rocky Linux 9 (dotnet10.0 0:10.0.113-1.el9_8 and 2 more)", "content_text": "Fixed versions: dotnet10.0 0:10.0.113-1.el9_8, dotnet8.0 0:8.0.132-1.el9_8, dotnet9.0 0:9.0.122-1.el9_8.", "date_published": "2026-10-13T19:01:16Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96231/fixed/ubuntu-22.04-lts", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96231/", "title": "CVE-2026-96231 · Microsoft .NET 10.0 runtime · fixed in Ubuntu 22.04 LTS (dotnet8 8.0.132-8.0.32-0ubuntu1~22.04.1)", "content_text": "Fixed versions: dotnet8 8.0.132-8.0.32-0ubuntu1~22.04.1.", "date_published": "2026-10-13T19:01:16Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96231/fixed/ubuntu-24.04-lts", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96231/", "title": "CVE-2026-96231 · Microsoft .NET 10.0 runtime · fixed in Ubuntu 24.04 LTS (dotnet10 10.0.113-10.0.13-0ubuntu1~24.04.1 and 1 more)", "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~24.04.1, dotnet8 8.0.132-8.0.32-0ubuntu1~24.04.1.", "date_published": "2026-10-13T19:01:16Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96231/fixed/ubuntu-26.04-lts", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96231/", "title": "CVE-2026-96231 · Microsoft .NET 10.0 runtime · fixed in Ubuntu 26.04 LTS (dotnet10 10.0.113-10.0.13-0ubuntu1~26.04.1)", "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~26.04.1.", "date_published": "2026-10-13T19:01:16Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96231/fixed/ubuntu-26.10", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96231/", "title": "CVE-2026-96231 · Microsoft .NET 10.0 runtime · fixed in Ubuntu 26.10 (dotnet10 10.0.113-10.0.13-0ubuntu1~26.10.1 and 1 more)", "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~26.10.1, dotnet11 11.0.100-11.0.0~rc2-0ubuntu1~26.10.1.", "date_published": "2026-10-13T19:01:16Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-85363/disclosed", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-85363/", "title": "CVE-2026-85363 · Microsoft .NET 10.0 runtime · disclosed", "content_text": "Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileges over a network.", "date_published": "2026-10-13T19:01:15Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-85363/fixed/nuget", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-85363/", "title": "CVE-2026-85363 · Microsoft .NET 10.0 runtime · fixed upstream (NuGet)", "content_text": "Fixed versions: Microsoft.WindowsDesktop.App.Runtime.win-arm64 10.0.13, Microsoft.WindowsDesktop.App.Runtime.win-arm64 11.0.0-rc.2, Microsoft.WindowsDesktop.App.Runtime.win-arm64 8.0.32, Microsoft.WindowsDesktop.App.Runtime.win-arm64 9.0.21, Microsoft.WindowsDesktop.App.Runtime.win-x64 10.0.13, Microsoft.WindowsDesktop.App.Runtime.win-x64 11.0.0-rc.2, Microsoft.WindowsDesktop.App.Runtime.win-x64 8.0.32, Microsoft.WindowsDesktop.App.Runtime.win-x64 9.0.21, Microsoft.WindowsDesktop.App.Runtime.win-x86 10.0.13, Microsoft.WindowsDesktop.App.Runtime.win-x86 11.0.0-rc.2, Microsoft.WindowsDesktop.App.Runtime.win-x86 8.0.32, Microsoft.WindowsDesktop.App.Runtime.win-x86 9.0.21.", "date_published": "2026-10-13T19:01:15Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-85363/fixed/red-hat-hummingbird-1", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-85363/", "title": "CVE-2026-85363 · Microsoft .NET 10.0 runtime · fixed in Red Hat hummingbird 1 (aspnetcore-runtime-8.0 0:8.0.32-0.1.hum1 and 12 more)", "content_text": "Fixed versions: aspnetcore-runtime-8.0 0:8.0.32-0.1.hum1, aspnetcore-runtime-dbg-8.0 0:8.0.32-0.1.hum1, aspnetcore-targeting-pack-8.0 0:8.0.32-0.1.hum1, dotnet-apphost-pack-8.0 0:8.0.32-0.1.hum1, dotnet-hostfxr-8.0 0:8.0.32-0.1.hum1, dotnet-runtime-8.0 0:8.0.32-0.1.hum1, dotnet-runtime-dbg-8.0 0:8.0.32-0.1.hum1, dotnet-sdk-8.0 0:8.0.132-0.1.hum1, dotnet-sdk-8.0-source-built-artifacts 0:8.0.132-0.1.hum1, dotnet-sdk-dbg-8.0 0:8.0.132-0.1.hum1, dotnet-targeting-pack-8.0 0:8.0.32-0.1.hum1, dotnet-templates-8.0 0:8.0.132-0.1.hum1, dotnet8.0 0:8.0.132-0.1.hum1.", "date_published": "2026-10-13T19:01:15Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-83520/disclosed", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-83520/", "title": "CVE-2026-83520 · Microsoft .NET 10.0 runtime · disclosed", "content_text": "Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.", "date_published": "2026-10-13T19:01:15Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-83520/fixed/nuget", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-83520/", "title": "CVE-2026-83520 · Microsoft .NET 10.0 runtime · fixed upstream (NuGet)", "content_text": "Fixed versions: Microsoft.WindowsDesktop.App.Runtime.win-arm64 10.0.13, Microsoft.WindowsDesktop.App.Runtime.win-arm64 11.0.0-rc.2, Microsoft.WindowsDesktop.App.Runtime.win-arm64 8.0.32, Microsoft.WindowsDesktop.App.Runtime.win-arm64 9.0.21, Microsoft.WindowsDesktop.App.Runtime.win-x64 10.0.13, Microsoft.WindowsDesktop.App.Runtime.win-x64 11.0.0-rc.2, Microsoft.WindowsDesktop.App.Runtime.win-x64 8.0.32, Microsoft.WindowsDesktop.App.Runtime.win-x64 9.0.21, Microsoft.WindowsDesktop.App.Runtime.win-x86 10.0.13, Microsoft.WindowsDesktop.App.Runtime.win-x86 11.0.0-rc.2, Microsoft.WindowsDesktop.App.Runtime.win-x86 8.0.32, Microsoft.WindowsDesktop.App.Runtime.win-x86 9.0.21.", "date_published": "2026-10-13T19:01:15Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-83520/fixed/red-hat-hummingbird-1", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-83520/", "title": "CVE-2026-83520 · Microsoft .NET 10.0 runtime · fixed in Red Hat hummingbird 1 (aspnetcore-runtime-8.0 0:8.0.32-0.1.hum1 and 12 more)", "content_text": "Fixed versions: aspnetcore-runtime-8.0 0:8.0.32-0.1.hum1, aspnetcore-runtime-dbg-8.0 0:8.0.32-0.1.hum1, aspnetcore-targeting-pack-8.0 0:8.0.32-0.1.hum1, dotnet-apphost-pack-8.0 0:8.0.32-0.1.hum1, dotnet-hostfxr-8.0 0:8.0.32-0.1.hum1, dotnet-runtime-8.0 0:8.0.32-0.1.hum1, dotnet-runtime-dbg-8.0 0:8.0.32-0.1.hum1, dotnet-sdk-8.0 0:8.0.132-0.1.hum1, dotnet-sdk-8.0-source-built-artifacts 0:8.0.132-0.1.hum1, dotnet-sdk-dbg-8.0 0:8.0.132-0.1.hum1, dotnet-targeting-pack-8.0 0:8.0.32-0.1.hum1, dotnet-templates-8.0 0:8.0.132-0.1.hum1, dotnet8.0 0:8.0.132-0.1.hum1.", "date_published": "2026-10-13T19:01:15Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70035/disclosed", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70035/", "title": "CVE-2026-70035 · Microsoft .NET 10.0 runtime · disclosed", "content_text": "Deserialization of untrusted data in .NET Framework allows an unauthorized attacker to execute code over a network.", "date_published": "2026-10-13T19:01:15Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70035/fixed/nuget", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70035/", "title": "CVE-2026-70035 · Microsoft .NET 10.0 runtime · fixed upstream (NuGet)", "content_text": "Fixed versions: Microsoft.WindowsDesktop.App.Runtime.win-arm64 10.0.13, Microsoft.WindowsDesktop.App.Runtime.win-arm64 11.0.0-rc.2, Microsoft.WindowsDesktop.App.Runtime.win-arm64 8.0.32, Microsoft.WindowsDesktop.App.Runtime.win-arm64 9.0.21, Microsoft.WindowsDesktop.App.Runtime.win-x64 10.0.13, Microsoft.WindowsDesktop.App.Runtime.win-x64 11.0.0-rc.2, Microsoft.WindowsDesktop.App.Runtime.win-x64 8.0.32, Microsoft.WindowsDesktop.App.Runtime.win-x64 9.0.21, Microsoft.WindowsDesktop.App.Runtime.win-x86 10.0.13, Microsoft.WindowsDesktop.App.Runtime.win-x86 11.0.0-rc.2, Microsoft.WindowsDesktop.App.Runtime.win-x86 8.0.32, Microsoft.WindowsDesktop.App.Runtime.win-x86 9.0.21.", "date_published": "2026-10-13T19:01:15Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70035/fixed/red-hat-hummingbird-1", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70035/", "title": "CVE-2026-70035 · Microsoft .NET 10.0 runtime · fixed in Red Hat hummingbird 1 (aspnetcore-runtime-8.0 0:8.0.32-0.1.hum1 and 12 more)", "content_text": "Fixed versions: aspnetcore-runtime-8.0 0:8.0.32-0.1.hum1, aspnetcore-runtime-dbg-8.0 0:8.0.32-0.1.hum1, aspnetcore-targeting-pack-8.0 0:8.0.32-0.1.hum1, dotnet-apphost-pack-8.0 0:8.0.32-0.1.hum1, dotnet-hostfxr-8.0 0:8.0.32-0.1.hum1, dotnet-runtime-8.0 0:8.0.32-0.1.hum1, dotnet-runtime-dbg-8.0 0:8.0.32-0.1.hum1, dotnet-sdk-8.0 0:8.0.132-0.1.hum1, dotnet-sdk-8.0-source-built-artifacts 0:8.0.132-0.1.hum1, dotnet-sdk-dbg-8.0 0:8.0.132-0.1.hum1, dotnet-targeting-pack-8.0 0:8.0.32-0.1.hum1, dotnet-templates-8.0 0:8.0.132-0.1.hum1, dotnet8.0 0:8.0.132-0.1.hum1.", "date_published": "2026-10-13T19:01:15Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70007/disclosed", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70007/", "title": "CVE-2026-70007 · Microsoft .NET 10.0 runtime · disclosed", "content_text": "Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network.", "date_published": "2026-10-13T19:01:15Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70007/fixed/nuget", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70007/", "title": "CVE-2026-70007 · Microsoft .NET 10.0 runtime · fixed upstream (NuGet)", "content_text": "Fixed versions: Microsoft.WindowsDesktop.App.Runtime.win-arm64 10.0.13, Microsoft.WindowsDesktop.App.Runtime.win-arm64 11.0.0-rc.2, Microsoft.WindowsDesktop.App.Runtime.win-arm64 8.0.32, Microsoft.WindowsDesktop.App.Runtime.win-arm64 9.0.21, Microsoft.WindowsDesktop.App.Runtime.win-x64 10.0.13, Microsoft.WindowsDesktop.App.Runtime.win-x64 11.0.0-rc.2, Microsoft.WindowsDesktop.App.Runtime.win-x64 8.0.32, Microsoft.WindowsDesktop.App.Runtime.win-x64 9.0.21, Microsoft.WindowsDesktop.App.Runtime.win-x86 10.0.13, Microsoft.WindowsDesktop.App.Runtime.win-x86 11.0.0-rc.2, Microsoft.WindowsDesktop.App.Runtime.win-x86 8.0.32, Microsoft.WindowsDesktop.App.Runtime.win-x86 9.0.21.", "date_published": "2026-10-13T19:01:15Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70007/fixed/red-hat-hummingbird-1", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70007/", "title": "CVE-2026-70007 · Microsoft .NET 10.0 runtime · fixed in Red Hat hummingbird 1 (aspnetcore-runtime-8.0 0:8.0.32-0.1.hum1 and 12 more)", "content_text": "Fixed versions: aspnetcore-runtime-8.0 0:8.0.32-0.1.hum1, aspnetcore-runtime-dbg-8.0 0:8.0.32-0.1.hum1, aspnetcore-targeting-pack-8.0 0:8.0.32-0.1.hum1, dotnet-apphost-pack-8.0 0:8.0.32-0.1.hum1, dotnet-hostfxr-8.0 0:8.0.32-0.1.hum1, dotnet-runtime-8.0 0:8.0.32-0.1.hum1, dotnet-runtime-dbg-8.0 0:8.0.32-0.1.hum1, dotnet-sdk-8.0 0:8.0.132-0.1.hum1, dotnet-sdk-8.0-source-built-artifacts 0:8.0.132-0.1.hum1, dotnet-sdk-dbg-8.0 0:8.0.132-0.1.hum1, dotnet-targeting-pack-8.0 0:8.0.32-0.1.hum1, dotnet-templates-8.0 0:8.0.132-0.1.hum1, dotnet8.0 0:8.0.132-0.1.hum1.", "date_published": "2026-10-13T19:01:15Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96224/disclosed", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96224/", "title": "CVE-2026-96224 · Microsoft .NET 10.0 runtime · disclosed", "content_text": "Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.", "date_published": "2026-10-13T19:00:31Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96224/fixed/nuget", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96224/", "title": "CVE-2026-96224 · Microsoft .NET 10.0 runtime · fixed upstream (NuGet)", "content_text": "Fixed versions: Microsoft.WindowsDesktop.App.Runtime.win-arm64 10.0.13, Microsoft.WindowsDesktop.App.Runtime.win-arm64 11.0.0-rc.2, Microsoft.WindowsDesktop.App.Runtime.win-arm64 8.0.32, Microsoft.WindowsDesktop.App.Runtime.win-arm64 9.0.21, Microsoft.WindowsDesktop.App.Runtime.win-x64 10.0.13, Microsoft.WindowsDesktop.App.Runtime.win-x64 11.0.0-rc.2, Microsoft.WindowsDesktop.App.Runtime.win-x64 8.0.32, Microsoft.WindowsDesktop.App.Runtime.win-x64 9.0.21, Microsoft.WindowsDesktop.App.Runtime.win-x86 10.0.13, Microsoft.WindowsDesktop.App.Runtime.win-x86 11.0.0-rc.2, Microsoft.WindowsDesktop.App.Runtime.win-x86 8.0.32, Microsoft.WindowsDesktop.App.Runtime.win-x86 9.0.21.", "date_published": "2026-10-13T19:00:31Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70197/disclosed", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70197/", "title": "CVE-2026-70197 · Microsoft .NET 10.0 installed on Linux · disclosed", "content_text": "Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.", "date_published": "2026-10-13T19:00:26Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70197/fixed/nuget", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70197/", "title": "CVE-2026-70197 · Microsoft .NET 10.0 installed on Linux · fixed upstream (NuGet)", "content_text": "Fixed versions: Microsoft.NETCore.App.Runtime.win-arm64 10.0.13, Microsoft.NETCore.App.Runtime.win-arm64 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.win-arm64 8.0.32, Microsoft.NETCore.App.Runtime.win-arm64 9.0.21, Microsoft.NETCore.App.Runtime.win-x64 10.0.13, Microsoft.NETCore.App.Runtime.win-x64 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.win-x64 8.0.32, Microsoft.NETCore.App.Runtime.win-x64 9.0.21, Microsoft.NETCore.App.Runtime.win-x86 10.0.13, Microsoft.NETCore.App.Runtime.win-x86 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.win-x86 8.0.32, Microsoft.NETCore.App.Runtime.win-x86 9.0.21.", "date_published": "2026-10-13T19:00:26Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70197/fixed/red-hat-hummingbird-1", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70197/", "title": "CVE-2026-70197 · Microsoft .NET 10.0 installed on Linux · fixed in Red Hat hummingbird 1 (aspnetcore-runtime-8.0 0:8.0.32-0.1.hum1 and 12 more)", "content_text": "Fixed versions: aspnetcore-runtime-8.0 0:8.0.32-0.1.hum1, aspnetcore-runtime-dbg-8.0 0:8.0.32-0.1.hum1, aspnetcore-targeting-pack-8.0 0:8.0.32-0.1.hum1, dotnet-apphost-pack-8.0 0:8.0.32-0.1.hum1, dotnet-hostfxr-8.0 0:8.0.32-0.1.hum1, dotnet-runtime-8.0 0:8.0.32-0.1.hum1, dotnet-runtime-dbg-8.0 0:8.0.32-0.1.hum1, dotnet-sdk-8.0 0:8.0.132-0.1.hum1, dotnet-sdk-8.0-source-built-artifacts 0:8.0.132-0.1.hum1, dotnet-sdk-dbg-8.0 0:8.0.132-0.1.hum1, dotnet-targeting-pack-8.0 0:8.0.32-0.1.hum1, dotnet-templates-8.0 0:8.0.132-0.1.hum1, dotnet8.0 0:8.0.132-0.1.hum1.", "date_published": "2026-10-13T19:00:26Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70190/disclosed", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70190/", "title": "CVE-2026-70190 · Microsoft .NET 10.0 runtime · disclosed", "content_text": "Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.", "date_published": "2026-10-13T19:00:26Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70161/disclosed", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70161/", "title": "CVE-2026-70161 · Microsoft .NET 10.0 runtime · disclosed", "content_text": "Improper limitation of a pathname to a restricted directory ('path traversal') in .NET allows an authorized attacker to elevate privileges locally.", "date_published": "2026-10-13T19:00:26Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70174/disclosed", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70174/", "title": "CVE-2026-70174 · Microsoft .NET 10.0 runtime · disclosed", "content_text": "Improperly implemented security check for standard in .NET allows an unauthorized attacker to execute code over a network.", "date_published": "2026-10-13T19:00:25Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70174/fixed/nuget", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70174/", "title": "CVE-2026-70174 · Microsoft .NET 10.0 runtime · fixed upstream (NuGet)", "content_text": "Fixed versions: Microsoft.WindowsDesktop.App.Runtime.win-arm64 10.0.13, Microsoft.WindowsDesktop.App.Runtime.win-arm64 11.0.0-rc.2, Microsoft.WindowsDesktop.App.Runtime.win-arm64 8.0.32, Microsoft.WindowsDesktop.App.Runtime.win-arm64 9.0.21, Microsoft.WindowsDesktop.App.Runtime.win-x64 10.0.13, Microsoft.WindowsDesktop.App.Runtime.win-x64 11.0.0-rc.2, Microsoft.WindowsDesktop.App.Runtime.win-x64 8.0.32, Microsoft.WindowsDesktop.App.Runtime.win-x64 9.0.21, Microsoft.WindowsDesktop.App.Runtime.win-x86 10.0.13, Microsoft.WindowsDesktop.App.Runtime.win-x86 11.0.0-rc.2, Microsoft.WindowsDesktop.App.Runtime.win-x86 8.0.32, Microsoft.WindowsDesktop.App.Runtime.win-x86 9.0.21.", "date_published": "2026-10-13T19:00:25Z" }, { "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-87697/disclosed", "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-87697/", "title": "CVE-2026-87697 · Microsoft .NET 10.0 runtime · disclosed", "content_text": "Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.", "date_published": "2026-10-13T19:00:16Z" } ] }