Summary
It was discovered that the .NET Blazor WebAssembly debug proxy did not
properly escape certain values. An attacker could possibly use this issue
to execute arbitrary code. The fix for this CVE was originally released via
USN-8942-1, but it was found to be incomplete. This issue only affected
dotnet10 and dotnet11. (CVE-2026-102870)
It was discovered that the Brotli decompression library used by .NET
incorrectly handled certain compressed streams. A remote attacker could
possibly use this issue to cause a denial of service or execute arbitrary
code. (CVE-2026-111497)
Alen Cheung discovered that .NET did not properly handle file ownership in
certain circumstances. An attacker could possibly use this issue to elevate
local privileges. (CVE-2026-114148)
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | dotnet8 | 8.0.133-8.0.33-0ubuntu1~22.04.1 |
| Ubuntu · 24.04 LTS 24.04:LTS | dotnet10 | 10.0.114-10.0.14-0ubuntu1~24.04.1 |
| Ubuntu · 24.04 LTS 24.04:LTS | dotnet8 | 8.0.133-8.0.33-0ubuntu1~24.04.1 |
| Ubuntu · 26.04 LTS 26.04:LTS | dotnet10 | 10.0.114-10.0.14-0ubuntu1~26.04.1 |
| Ubuntu · 26.10 | dotnet10 | 10.0.114-10.0.14-0ubuntu1~26.10.1 |
| Ubuntu · 26.10 | dotnet11 | 11.0.100-11.0.0~rc3-0ubuntu1~26.10.1 |
Vulnerabilities 3
-
Critical 9.2
Out-of-Bounds Write in Google Brotli Decoder
A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause …
KEV Oct 27, 2026 -
High 8.8
ASP.NET Core Remote Code Execution Vulnerability
Improper control of generation of code ('code injection') in ASP.NET Core allows an unauthorized attacker to execute code over a network.
-
High 7.8CVE-2026-114148 Public exploit
ASP.NET Core Elevation of Privilege Vulnerability
Incorrect default permissions in ASP.NET Core allows an authorized attacker to elevate privileges locally.