Important: dotnet10.0 security update (Amazon Linux 2023)

Summary

Fixed packages 23

Vulnerabilities 4

• High 7.8
  CVE-2026-62886

  .NET Elevation of Privilege Vulnerability

  Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally.

  Microsoft Microsoft Visual Studio 2022 version 17.14 Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 Microsoft .NET Framework 3.5 AND 4.8 Ubuntu Alpine NuGet
  Aug 11, 2026
• High 7.5
  CVE-2026-69805

  .NET Elevation of Privilege Vulnerability

  External control of file name or path in .NET allows an unauthorized attacker to elevate privileges over a network.

  Microsoft Microsoft Visual Studio 2022 version 17.14 Microsoft Visual Studio 2026 version 18.9 Microsoft.Diagnostics.Runtime
  Sep 8, 2026
• High 7.0
  CVE-2026-69806

  .NET Elevation of Privilege Vulnerability

  Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally.

  Microsoft Microsoft Visual Studio 2022 version 17.14 .NET 9.0 runtime .NET 10.0 runtime Ubuntu Alpine
  Sep 8, 2026
• Medium 6.5
  CVE-2026-58649

  .NET Information Disclosure Vulnerability

  Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.

  Microsoft Microsoft Visual Studio 2022 version 17.14 .NET 9.0 runtime .NET 8.0 runtime Ubuntu Alpine
  Sep 8, 2026

References

• web
  https://alas.aws.amazon.com/cve/html/CVE-2026-58649.html
• web
  https://alas.aws.amazon.com/cve/html/CVE-2026-62886.html
• web
  https://alas.aws.amazon.com/cve/html/CVE-2026-69805.html
• web
  https://alas.aws.amazon.com/cve/html/CVE-2026-69806.html