Skip to content
OpenAdvisories

Description

A tampering vulnerability exists when .NET Core improperly handles specially crafted files. An attacker who successfully exploited this vulnerability could write arbitrary files and directories to certain locations on a vulnerable system. However, an attacker would have limited control over the destination of the files and directories.
To exploit the vulnerability, an attacker must send a specially crafted file to a vulnerable system.
The security update fixes the vulnerability by ensuring .NET Core properly handles files.

Affected products

VendorProductAffectedFixed
Microsoft .NET 10.0 10.0.0 – < 10.0.8 10.0.8
Microsoft .NET 8.0 8.0.0 – < 8.0.27 8.0.27
Microsoft .NET 9.0 9.0.0 – < 9.0.16 9.0.16
Microsoft Microsoft Visual Studio 2022 version 17.12 17.12.0 – < 17.12.20 17.12.20
Microsoft Microsoft Visual Studio 2022 version 17.14 17.14.0 – < 17.14.32 17.14.32
Microsoft Microsoft Visual Studio 2026 version 18.5 18.5.0 – < 18.5.3 18.5.3

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Ubuntu 22.04 LTS dotnet7 No fix yet —
ReleasePackageFixed inAdvisory
Alpine v3.24 dotnet10-runtime 10.0.8-r0 —
Alpine v3.24 dotnet8-runtime 8.0.27-r0 —
Alpine v3.24 dotnet9-runtime 9.0.16-r0 —
Alpine v3.23 dotnet10-runtime 10.0.8-r0 —
Alpine v3.23 dotnet8-runtime 8.0.27-r0 —
Alpine v3.23 dotnet9-runtime 9.0.16-r0 —
Alpine v3.22 dotnet8-runtime 8.0.27-r0 —
Alpine v3.22 dotnet9-runtime 9.0.16-r0 —
Alpine v3.21 dotnet8-runtime 8.0.27-r0 —
Alpine v3.21 dotnet9-runtime 9.0.16-r0 —

Affected packages

Advisories 3

References