High MSRC-CVE-2026-45491 1 CVE

.NET Tampering Vulnerability

Published Jun 9, 2026 · Updated Jun 9, 2026

Vendor: Microsoft

Summary

Impact: Tampering. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

Details

Security updates
10.0.9 — https://support.microsoft.com/help/5097148
8.0.28 — https://support.microsoft.com/help/5097149
9.0.17 — https://support.microsoft.com/help/5097150

Vulnerabilities 1

Medium 6.2

CVE-2026-45491

.NET Tampering Vulnerability

Improper link resolution before file access ('link following') in .NET allows an unauthorized attacker to perform tampering locally.

Microsoft .NET 9.0 runtime .NET 8.0 runtime .NET 10.0 runtime Ubuntu Alpine Wolfi NuGet

Jun 9, 2026

Revision history

2026-06-09 #1
Information published.

References

CVE-2026-45491 .NET Tampering Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45491
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
Common Vulnerability Scoring System
https://www.first.org/cvss