CVE-2026-96231 · GHSA-2j93-m82w-73j2
Microsoft Security Advisory CVE-2026-96231 - .NET and Visual Studio Elevation of Privilege Vulnerability
- Risk score
- 62/100
- CVSS
- 7.8 v3.1
- Exploit chance (30 days)
- 0.3%
- Published
- 13 Oct 2026
Open in the live forecast Today's forecast
What to know
- What it is
- Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.
- Affected
- Microsoft.NETCore.App.Runtime.linux-arm (nuget) >= 8.0.0, <= 8.0.31; Microsoft.NETCore.App.Runtime.linux-arm64 (nuget) >= 8.0.0, <= 8.0.31; Microsoft.NETCore.App.Runtime.linux-musl-arm (nuget) >= 8.0.0, <= 8.0.31; Microsoft.NETCore.App.Runtime.linux-musl-arm64 (nuget) >= 8.0.0, <= 8.0.31
- Fix
- Upgrade Microsoft.NETCore.App.Runtime.linux-arm to 8.0.32; Microsoft.NETCore.App.Runtime.linux-arm64 to 8.0.32; Microsoft.NETCore.App.Runtime.linux-musl-arm to 8.0.32; Microsoft.NETCore.App.Runtime.linux-musl-arm64 to 8.0.32; Microsoft.NETCore.App.Runtime.linux-musl-x64 to 8.0.32; Microsoft.NETCore…
- Exploitation
- No known exploitation
Why it is Amber
- CVSS 7.8 high
- On your watchlist: .net, NuGet
Affected packages
| Package | Ecosystem | Vulnerable | Fixed in |
|---|---|---|---|
| Microsoft.NETCore.App.Runtime.linux-arm | nuget | >= 8.0.0, <= 8.0.31 | 8.0.32 |
| Microsoft.NETCore.App.Runtime.linux-arm64 | nuget | >= 8.0.0, <= 8.0.31 | 8.0.32 |
| Microsoft.NETCore.App.Runtime.linux-musl-arm | nuget | >= 8.0.0, <= 8.0.31 | 8.0.32 |
| Microsoft.NETCore.App.Runtime.linux-musl-arm64 | nuget | >= 8.0.0, <= 8.0.31 | 8.0.32 |
| Microsoft.NETCore.App.Runtime.linux-musl-x64 | nuget | >= 8.0.0, <= 8.0.31 | 8.0.32 |
| Microsoft.NETCore.App.Runtime.linux-x64 | nuget | >= 8.0.0, <= 8.0.31 | 8.0.32 |
| Microsoft.NETCore.App.Runtime.osx-arm64 | nuget | >= 8.0.0, <= 8.0.31 | 8.0.32 |
| Microsoft.NETCore.App.Runtime.osx-x64 | nuget | >= 8.0.0, <= 8.0.31 | 8.0.32 |
| Microsoft.NETCore.App.Runtime.linux-arm | nuget | >= 10.0.0, <= 10.0.12 | 10.0.13 |
| Microsoft.NETCore.App.Runtime.linux-arm64 | nuget | >= 10.0.0, <= 10.0.12 | 10.0.13 |
| Microsoft.NETCore.App.Runtime.linux-musl-arm | nuget | >= 10.0.0, <= 10.0.12 | 10.0.13 |
| Microsoft.NETCore.App.Runtime.linux-musl-arm64 | nuget | >= 10.0.0, <= 10.0.12 | 10.0.13 |
References
- https://github.com/advisories/GHSA-2j93-m82w-73j2
- https://github.com/dotnet/runtime/security/advisories/GHSA-2j93-m82w-73j2
- https://github.com/dotnet/announcements/issues/479
- https://github.com/dotnet/runtime/issues/135707
- https://github.com/advisories/GHSA-2j93-m82w-73j2
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96231
Original description
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.
Last activity 13 Oct 2026. Patch Forecast updates every hour.