ASP.NET Coreの権限昇格の脆弱性、ローカルで権限を奪われるおそれ
Summary
ASP.NET Coreの既定のアクセス権の設定に誤りがあり、認証を受けた攻撃者が手元のシステムで権限を昇格できる脆弱性です。CVSSは7.8で、深刻度は高とされています。.NET 10.0は10.0.403、.NET 11.0は11.0.100-rc.3の修正版で修正されるため、Linux、Mac OS、Windowsのいずれで使っているかを確認し、該当するものを更新してください。
AI summary
Produced by SecPulse using an external AI model; it may contain mistakes. Check the original description and references below before acting on it.
ASP.NET Coreの既定のアクセス権の設定に誤りがあり、認証を受けた攻撃者が手元のシステムで権限を昇格できる脆弱性です。CVSSは7.8で、深刻度は高とされています。.NET 10.0は10.0.403、.NET 11.0は11.0.100-rc.3の修正版で修正されるため、Linux、Mac OS、Windowsのいずれで使っているかを確認し、該当するものを更新してください。
Affected packages
| Package | Affected → Fixed | |
|---|---|---|
| Microsoft.NET 10.0 installed on Linux |
≥ 10.0.0, < 10.0.403→ 10.0.403 |
10.0.403 |
| Microsoft.NET 10.0 installed on Mac OS |
≥ 10.0.0, < 10.0.403→ 10.0.403 |
10.0.403 |
| Microsoft.NET 10.0 installed on Windows |
≥ 10.0.0, < 10.0.403→ 10.0.403 |
10.0.403 |
| Microsoft.NET 11.0 installed on Linux |
≥ 11.0.0-preview.1, < 11.0.100-rc.3→ 11.0.100-rc.3 |
11.0.100-rc.3 |
| Microsoft.NET 11.0 installed on Mac OS |
≥ 11.0.0-preview.1, < 11.0.100-rc.3→ 11.0.100-rc.3 |
11.0.100-rc.3 |
| Microsoft.NET 11.0 installed on Windows |
≥ 11.0.0-preview.1, < 11.0.100-rc.3→ 11.0.100-rc.3 |
11.0.100-rc.3 |
| Microsoft.NET 8.0 installed on Linux |
≥ 8.0.0, < 8.0.427→ 8.0.427 |
8.0.427 |
| Microsoft.NET 8.0 installed on Mac OS |
≥ 8.0.0, < 8.0.427→ 8.0.427 |
8.0.427 |
| Microsoft.NET 8.0 installed on Windows |
≥ 8.0.0, < 8.0.427→ 8.0.427 |
8.0.427 |
| Microsoft.NET 9.0 installed on Linux |
≥ 9.0.0, < 9.0.320→ 9.0.320 |
9.0.320 |
| Microsoft.NET 9.0 installed on Mac OS |
≥ 9.0.0, < 9.0.320→ 9.0.320 |
9.0.320 |
| Microsoft.NET 9.0 installed on Windows |
≥ 9.0.0, < 9.0.320→ 9.0.320 |
9.0.320 |
| Microsoft.NET source-build Linux tarballs (all archive types) |
≥ 8.0.100, < 10.0.403-servicing.26523.112→ 10.0.403-servicing.26523.112 |
10.0.403-servicing.26523.112 |
| MicrosoftASP.NET Core runtime and targeting-pack Linux tarballs (Microsoft-published) |
≥ 8.0.0, < 9.0.22→ 9.0.22 |
9.0.22 |
Related Linux packages
Separate from Microsoft's own updates, each distribution has fixed the Linux packages that use the same component. This does not apply if you only use Microsoft products.
- Alpine Linux ALPINE-CVE-2026-114148 dotnet10-runtime, dotnet9-runtime, dotnet8-runtime Fix available
- BellSoft Alpaquita BELL-CVE-2026-114148 dotnet8-runtime Fix available
- Ubuntu UBUNTU-CVE-2026-114148 dotnet11, dotnet10, dotnet8 Fix available
Original description The description as published by the source.
Incorrect default permissions in ASP.NET Core allows an authorized attacker to elevate privileges locally.
Source: Microsoft Security Response Center Blog NVD