Summary
Miha Zupan discovered that .NET did not properly interpret certain HTTP
requests. An attacker could possibly use this issue to perform request
smuggling and bypass a security feature. (CVE-2026-62899)
Ivan Demchuk discovered that .NET did not properly handle the removal of
sensitive information before storage or transfer. An attacker could possibly
use this issue to disclose sensitive information. (CVE-2026-62900)
Kevin Gosse discovered that .NET did not properly check an input for a loop
condition. An attacker could possibly use this issue to cause a denial of
service. (CVE-2026-62901)
Kevin Gosse discovered that .NET did not properly perform error checking
when securing shared resources used for diagnostics IPC. An attacker could
possibly use this issue to elevate privileges. (CVE-2026-62909)
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | dotnet8 | 8.0.130-8.0.30-0ubuntu1~22.04.1 |
| Ubuntu · 24.04 LTS 24.04:LTS | dotnet10 | 10.0.111-10.0.11-0ubuntu1~24.04.1 |
| Ubuntu · 24.04 LTS 24.04:LTS | dotnet8 | 8.0.130-8.0.30-0ubuntu1~24.04.1 |
| Ubuntu · 26.04 LTS 26.04:LTS | dotnet10 | 10.0.111-10.0.11-0ubuntu1~26.04.1 |
Vulnerabilities 4
-
High 7.8
.NET Elevation of Privilege Vulnerability
Uncaught exception in .NET allows an authorized attacker to elevate privileges locally.
-
High 7.5
.NET Denial of Service Vulnerability
Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network.
-
Medium 5.9
.NET Security Feature Bypass Vulnerability
Inconsistent interpretation of http requests ('http request/response smuggling') in .NET allows an unauthorized attacker to bypass a security feature over a network.
-
Medium 5.9
.NET Information Disclosure Vulnerability
Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network.