CVE-2026-105544 — .NET Elevation of Privilege Vulnerability

Description

Improper access control in .NET allows an authorized attacker to elevate privileges locally.

Affected products

Vendor	Product	Affected	Fixed
Microsoft	.NET 10.0 installed on Linux	10.0.0 – < 10.0.404	10.0.404
Microsoft	.NET 10.0 installed on Mac OS	10.0.0 – < 10.0.404	10.0.404
Microsoft	.NET 10.0 installed on Windows	10.0.0 – < 10.0.404	10.0.404
Microsoft	.NET 11.0 installed on Linux	11.0.0-preview.1 – < 11.0.100	11.0.100
Microsoft	.NET 11.0 installed on Mac OS	11.0.0-preview.1 – < 11.0.100	11.0.100
Microsoft	.NET 11.0 installed on Windows	11.0.0-preview.1 – < 11.0.100	11.0.100
Microsoft	.NET 8.0 installed on Linux	8.0.0 – < 8.0.428	8.0.428
Microsoft	.NET 8.0 installed on Mac OS	8.0.0 – < 8.0.428	8.0.428
Microsoft	.NET 8.0 installed on Windows	8.0.0 – < 8.0.428	8.0.428
Microsoft	.NET 9.0 installed on Linux	9.0.0 – < 9.0.321	9.0.321
Microsoft	.NET 9.0 installed on Mac OS	9.0.0 – < 9.0.321	9.0.321
Microsoft	.NET 9.0 installed on Windows	9.0.0 – < 9.0.321	9.0.321
Microsoft	Microsoft Visual Studio 2022 version 17.14	17.14.0 – < 17.14.45	17.14.45
Microsoft	Microsoft Visual Studio 2026 version 18.11	18.11.0 – < 18.11.4	18.11.4
Microsoft	Microsoft Visual Studio 2026 version 18.12	18.12.0 – < 18.12.0	18.12.0
Microsoft	Microsoft.TestPlatform.CLI version 17.10.0	17.10.0 – < publication	publication
Microsoft	Microsoft.TestPlatform.CLI version 17.10.0-preview-24080-01	17.10.0-preview-24080-01 – < publication	publication
Microsoft	Microsoft.TestPlatform.CLI version 17.10.0-release-24177-07	17.10.0-release-24177-07 – < publication	publication
Microsoft	Microsoft.TestPlatform.CLI version 17.11	17.11.0 – < 17.11.2	17.11.2
Microsoft	Microsoft.TestPlatform.CLI version 17.11.0-release-24352-06	17.11.0-release-24352-06 – < publication	publication
Microsoft	Microsoft.TestPlatform.CLI version 17.11.0-release-24373-02	17.11.0-release-24373-02 – < publication	publication
Microsoft	Microsoft.TestPlatform.CLI version 17.12	17.12.0 – < 17.12.1	17.12.1
Microsoft	Microsoft.TestPlatform.CLI version 17.13.0	17.13.0 – < publication	publication
Microsoft	Microsoft.TestPlatform.CLI version 17.14	17.14.0 – < 17.14.2	17.14.2
Microsoft	Microsoft.TestPlatform.CLI version 17.14.0-preview-25107-01	17.14.0-preview-25107-01 – < publication	publication
Microsoft	Microsoft.TestPlatform.CLI version 17.3	17.2.0-preview-20220301-01 – < 17.3.4	17.3.4
Microsoft	Microsoft.TestPlatform.CLI version 17.3.0-preview-20220426-02	17.3.0-preview-20220426-02 – < publication	publication
Microsoft	Microsoft.TestPlatform.CLI version 17.3.0-preview-20220530-08	17.3.0-preview-20220530-08 – < publication	publication
Microsoft	Microsoft.TestPlatform.CLI version 17.3.0-preview-20220612-01	17.3.0-preview-20220612-01 – < publication	publication
Microsoft	Microsoft.TestPlatform.CLI version 17.4.0	17.4.0 – < publication	publication
Microsoft	Microsoft.TestPlatform.CLI version 17.4.0-preview-20220707-01	17.4.0-preview-20220707-01 – < publication	publication
Microsoft	Microsoft.TestPlatform.CLI version 17.4.0-preview-20220726-02	17.4.0-preview-20220726-02 – < publication	publication
Microsoft	Microsoft.TestPlatform.CLI version 17.4.0-preview-20221003-03	17.4.0-preview-20221003-03 – < publication	publication
Microsoft	Microsoft.TestPlatform.CLI version 17.4.0-release-20220926-01	17.4.0-release-20220926-01 – < publication	publication
Microsoft	Microsoft.TestPlatform.CLI version 17.4.1	17.4.1 – < publication	publication
Microsoft	Microsoft.TestPlatform.CLI version 17.5.0	17.5.0 – < publication	publication
Microsoft	Microsoft.TestPlatform.CLI version 17.5.0-preview-20221003-04	17.5.0-preview-20221003-04 – < publication	publication
Microsoft	Microsoft.TestPlatform.CLI version 17.5.0-preview-20221221-03	17.5.0-preview-20221221-03 – < publication	publication
Microsoft	Microsoft.TestPlatform.CLI version 17.6.0	17.6.0 – < publication	publication
Microsoft	Microsoft.TestPlatform.CLI version 17.6.0-preview-20230223-05	17.6.0-preview-20230223-05 – < publication	publication
Microsoft	Microsoft.TestPlatform.CLI version 17.6.1	17.6.1 – < publication	publication
Microsoft	Microsoft.TestPlatform.CLI version 17.6.2	17.6.2 – < publication	publication
Microsoft	Microsoft.TestPlatform.CLI version 17.6.3	17.6.3 – < publication	publication
Microsoft	Microsoft.TestPlatform.CLI version 17.7.0	17.7.0 – < publication	publication
Microsoft	Microsoft.TestPlatform.CLI version 17.7.0-preview-23364-03	17.7.0-preview-23364-03 – < publication	publication
Microsoft	Microsoft.TestPlatform.CLI version 17.7.0-preview.23280.1	17.7.0-preview.23280.1 – < publication	publication
Microsoft	Microsoft.TestPlatform.CLI version 17.7.1	17.7.1 – < publication	publication
Microsoft	Microsoft.TestPlatform.CLI version 17.7.2	17.7.2 – < publication	publication
Microsoft	Microsoft.TestPlatform.CLI version 17.8	17.8.0 – < 17.8.1	17.8.1
Microsoft	Microsoft.TestPlatform.CLI version 17.8.0-preview-23371-04	17.8.0-preview-23371-04 – < publication	publication
Microsoft	Microsoft.TestPlatform.CLI version 17.8.0-preview-23424-02	17.8.0-preview-23424-02 – < publication	publication
Microsoft	Microsoft.TestPlatform.CLI version 17.8.0-release-23468-02	17.8.0-release-23468-02 – < publication	publication
Microsoft	Microsoft.TestPlatform.CLI version 17.9.0	17.9.0 – < publication	publication
Microsoft	Microsoft.TestPlatform.CLI version 17.9.0-preview-23503-02	17.9.0-preview-23503-02 – < publication	publication
Microsoft	Microsoft.TestPlatform.CLI version 17.9.0-preview-23531-01	17.9.0-preview-23531-01 – < publication	publication
Microsoft	Microsoft.TestPlatform.CLI version 17.9.0-preview-23577-04	17.9.0-preview-23577-04 – < publication	publication
Microsoft	Microsoft.TestPlatform.CLI version 17.9.0-release-23619-01	17.9.0-release-23619-01 – < publication	publication
Microsoft	Microsoft.TestPlatform.CLI version 18.0	18.0.0 – < 18.0.2	18.0.2
Microsoft	Microsoft.TestPlatform.CLI version 18.10	18.10.0 – < 18.10.2	18.10.2
Microsoft	Microsoft.TestPlatform.CLI version 18.11	18.11.0 – < 18.11.1	18.11.1
Microsoft	Microsoft.TestPlatform.CLI version 18.3.0	18.3.0 – < publication	publication
Microsoft	Microsoft.TestPlatform.CLI version 18.4.0	18.4.0 – < publication	publication
Microsoft	Microsoft.TestPlatform.CLI version 18.5.0	18.5.0 – < publication	publication
Microsoft	Microsoft.TestPlatform.CLI version 18.5.1	18.5.1 – < publication	publication
Microsoft	Microsoft.TestPlatform.CLI version 18.6.0	18.6.0 – < publication	publication
Microsoft	Microsoft.TestPlatform.CLI version 18.7	18.7.0 – < 18.7.1	18.7.1
Microsoft	Microsoft.TestPlatform.CLI version 18.8.0	18.8.0 – < publication	publication
Microsoft	Microsoft.TestPlatform.CLI version 18.8.1	18.8.1 – < publication	publication
Microsoft	Microsoft.TestPlatform.CLI version 18.9.0	18.9.0 – < publication	publication

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Ubuntu

Security tracker ↗

Release	Package	Fixed in	Advisory
Ubuntu 26.10	dotnet10	10.0.115-10.0.15-0ubuntu1~26.10.1	USN-9042-1
Ubuntu 26.10	dotnet11	11.0.100-11.0.0-0ubuntu1~26.10.1	USN-9042-1
Ubuntu 26.04 LTS	dotnet10	10.0.115-10.0.15-0ubuntu1~26.04.1	USN-9042-1
Ubuntu 24.04 LTS	dotnet10	10.0.115-10.0.15-0ubuntu1~24.04.1	USN-9042-1
Ubuntu 24.04 LTS	dotnet8	8.0.134-8.0.34-0ubuntu1~24.04.1	USN-9042-1
Ubuntu 22.04 LTS	dotnet6 +1	No fix yet	—
Ubuntu 22.04 LTS	dotnet8	8.0.134-8.0.34-0ubuntu1~22.04.1	USN-9042-1

Red Hat

Security tracker ↗

Release	Package	Fixed in	Advisory
RHEL 10	dotnet-hostfxr-10.0 +7	10.0.15-1.el10_3	RHSA-2026:99143
RHEL 10	dotnet-hostfxr-8.0 +7	8.0.34-1.el10_3	RHSA-2026:99147
RHEL 10	dotnet-hostfxr-9.0 +7	9.0.23-1.el10_3	RHSA-2026:99145
RHEL 10	dotnet10.0 +5	10.0.115-1.el10_3	RHSA-2026:99143
RHEL 10	dotnet8.0 +4	8.0.134-1.el10_3	RHSA-2026:99147
RHEL 10	dotnet9.0 +6	9.0.124-1.el10_3	RHSA-2026:99145
RHEL 9	dotnet-hostfxr-10.0 +7	10.0.15-1.el9_9	RHSA-2026:99142
RHEL 9	dotnet-hostfxr-8.0 +7	8.0.34-1.el9_9	RHSA-2026:99146
RHEL 9	dotnet-hostfxr-9.0 +7	9.0.23-1.el9_9	RHSA-2026:99144
RHEL 9	dotnet10.0 +5	10.0.115-1.el9_9	RHSA-2026:99142
RHEL 9	dotnet8.0 +4	8.0.134-1.el9_9	RHSA-2026:99146
RHEL 9	dotnet9.0 +6	9.0.124-1.el9_9	RHSA-2026:99144
RHEL 8	dotnet-hostfxr-10.0 +7	10.0.15-1.el8_10	RHSA-2026:99053
RHEL 8	dotnet-hostfxr-8.0 +7	8.0.34-1.el8_10	RHSA-2026:99052
RHEL 8	dotnet-hostfxr-9.0 +7	9.0.23-1.el8_10	RHSA-2026:99051
RHEL 8	dotnet10.0 +5	10.0.115-1.el8_10	RHSA-2026:99053
RHEL 8	dotnet8.0 +4	8.0.134-1.el8_10	RHSA-2026:99052
RHEL 8	dotnet9.0 +6	9.0.124-1.el8_10	RHSA-2026:99051

AlmaLinux

Errata ↗

Release	Package	Fixed in	Advisory
AlmaLinux 8	dotnet-hostfxr-10.0 +7	10.0.15-1.el8_10	ALSA-2026:99053
AlmaLinux 8	dotnet-hostfxr-8.0 +7	8.0.34-1.el8_10	ALSA-2026:99052
AlmaLinux 8	dotnet-hostfxr-9.0 +7	9.0.23-1.el8_10	ALSA-2026:99051
AlmaLinux 8	dotnet-sdk-10.0 +4	10.0.115-1.el8_10	ALSA-2026:99053
AlmaLinux 8	dotnet-sdk-8.0 +3	8.0.134-1.el8_10	ALSA-2026:99052
AlmaLinux 8	dotnet-sdk-9.0 +5	9.0.124-1.el8_10	ALSA-2026:99051

Rocky Linux

Errata ↗

Release	Package	Fixed in	Advisory
Rocky Linux 8	dotnet-hostfxr-10.0 +7	10.0.15-1.el8_10	RLSA-2026:99053
Rocky Linux 8	dotnet-hostfxr-8.0 +7	8.0.34-1.el8_10	RLSA-2026:99052
Rocky Linux 8	dotnet-hostfxr-9.0 +7	9.0.23-1.el8_10	RLSA-2026:99051
Rocky Linux 8	dotnet-sdk-10.0 +4	10.0.115-1.el8_10	RLSA-2026:99053
Rocky Linux 8	dotnet-sdk-8.0 +3	8.0.134-1.el8_10	RLSA-2026:99052
Rocky Linux 8	dotnet-sdk-9.0 +5	9.0.124-1.el8_10	RLSA-2026:99051

Alpine

Security tracker ↗

Release	Package	Fixed in	Advisory
Alpine v3.24	dotnet10-runtime	10.0.15-r0	—
Alpine v3.24	dotnet8-runtime	8.0.34-r0	—
Alpine v3.24	dotnet9-runtime	9.0.23-r0	—
Alpine v3.23	dotnet8-runtime	8.0.34-r0	—
Alpine v3.23	dotnet9-runtime	9.0.23-r0	—
Alpine v3.22	dotnet8-runtime	8.0.34-r0	—
Alpine v3.22	dotnet9-runtime	9.0.23-r0	—

Advisories 19

USN-9042-1 dotnet8, dotnet10, dotnet11 vulnerabilities Ubuntu Security Notices (USN) · Nov 13, 2026
RHSA-2026:99143 Red Hat Security Advisory: .NET 10.0 security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Nov 13, 2026
RHSA-2026:99053 Red Hat Security Advisory: .NET 10.0 security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Nov 13, 2026
RHSA-2026:99051 Red Hat Security Advisory: .NET 9.0 security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Nov 13, 2026
RHSA-2026:99142 Red Hat Security Advisory: .NET 10.0 security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Nov 13, 2026
RHSA-2026:99146 Red Hat Security Advisory: .NET 8.0 security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Nov 13, 2026
RHSA-2026:99147 Red Hat Security Advisory: .NET 8.0 security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Nov 13, 2026
RHSA-2026:99145 Red Hat Security Advisory: .NET 9.0 security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Nov 13, 2026
RHSA-2026:99144 Red Hat Security Advisory: .NET 9.0 security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Nov 13, 2026
RHSA-2026:99052 Red Hat Security Advisory: .NET 8.0 security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Nov 13, 2026
ALSA-2026:99051 Important: .NET 9.0 security, bug fix, and enhancement update AlmaLinux Security Advisories · Nov 13, 2026
ALSA-2026:99053 Important: .NET 10.0 security, bug fix, and enhancement update AlmaLinux Security Advisories · Nov 13, 2026
ALSA-2026:99052 Important: .NET 8.0 security, bug fix, and enhancement update AlmaLinux Security Advisories · Nov 13, 2026
RLSA-2026:99052 Important: .NET 8.0 security, bug fix, and enhancement update Rocky Linux Security Advisories · Nov 13, 2026
RLSA-2026:99051 Important: .NET 9.0 security, bug fix, and enhancement update Rocky Linux Security Advisories · Nov 13, 2026
RLSA-2026:99053 Important: .NET 10.0 security, bug fix, and enhancement update Rocky Linux Security Advisories · Nov 13, 2026
WID-SEC-2026-4481 Microsoft Developer Tools: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 11, 2026
MSRC-CVE-2026-105544 .NET Elevation of Privilege Vulnerability Microsoft Security Response Center · Nov 11, 2026
NCSC-2026-0473 Kwetsbaarheden verholpen in Microsoft Developer Tools NCSC-NL (Netherlands) · Nov 10, 2026

References

.NET Elevation of Privilege Vulnerability vendor-advisory patch

CNA	v3.1	7.5
EUVD	v3.1	7.5