Medium
5.9
ASP.NET Core Information Disclosure Vulnerability
CVE-2026-114150
First seen on SecPulse
Summary
Use of uninitialized resource in ASP.NET Core allows an unauthorized attacker to disclose information over a network.
Affected packages
| Package | Affected → Fixed | |
|---|---|---|
| Microsoft.NET 11.0 installed on Linux |
≥ 11.0.0-preview.1, < 11.0.0→ 11.0.0 |
11.0.0 |
| Microsoft.NET 11.0 installed on Mac OS |
≥ 11.0.0-preview.1, < 11.0.0→ 11.0.0 |
11.0.0 |
| Microsoft.NET 11.0 installed on Windows |
≥ 11.0.0-preview.1, < 11.0.0→ 11.0.0 |
11.0.0 |
| MicrosoftMicrosoft Visual Studio 2026 version 18.12 |
< 18.12.0→ 18.12.0 |
18.12.0 |
References
- REDHAT Red Hat
- web secure@microsoft.com