.NETの権限昇格の脆弱性、ローカルで権限を奪われるおそれ
Summary
.NETのアクセス制御の不備により、権限を持つ攻撃者が端末上で権限を昇格できる脆弱性が公表されました。影響を受けるのは、Linux・Mac OS・Windowsに導入された.NET 10.0は10.0.404より前の版、.NET 11.0は11.0.100より前の版です。修正版は.NET 10.0が10.0.404、.NET 11.0が11.0.100で、早めの更新をおすすめします。
AI summary
Produced by SecPulse using an external AI model; it may contain mistakes. Check the original description and references below before acting on it.
.NETのアクセス制御の不備により、権限を持つ攻撃者が端末上で権限を昇格できる脆弱性が公表されました。影響を受けるのは、Linux・Mac OS・Windowsに導入された.NET 10.0は10.0.404より前の版、.NET 11.0は11.0.100より前の版です。修正版は.NET 10.0が10.0.404、.NET 11.0が11.0.100で、早めの更新をおすすめします。
Affected packages
| Package | Affected → Fixed | |
|---|---|---|
| Microsoft.NET 10.0 installed on Linux |
≥ 10.0.0, < 10.0.404→ 10.0.404 |
10.0.404 |
| Microsoft.NET 10.0 installed on Mac OS |
≥ 10.0.0, < 10.0.404→ 10.0.404 |
10.0.404 |
| Microsoft.NET 10.0 installed on Windows |
≥ 10.0.0, < 10.0.404→ 10.0.404 |
10.0.404 |
| Microsoft.NET 11.0 installed on Linux |
≥ 11.0.0-preview.1, < 11.0.100→ 11.0.100 |
11.0.100 |
| Microsoft.NET 11.0 installed on Mac OS |
≥ 11.0.0-preview.1, < 11.0.100→ 11.0.100 |
11.0.100 |
| Microsoft.NET 11.0 installed on Windows |
≥ 11.0.0-preview.1, < 11.0.100→ 11.0.100 |
11.0.100 |
| Microsoft.NET 8.0 installed on Linux |
≥ 8.0.0, < 8.0.428→ 8.0.428 |
8.0.428 |
| Microsoft.NET 8.0 installed on Mac OS |
≥ 8.0.0, < 8.0.428→ 8.0.428 |
8.0.428 |
| Microsoft.NET 8.0 installed on Windows |
≥ 8.0.0, < 8.0.428→ 8.0.428 |
8.0.428 |
| Microsoft.NET 9.0 installed on Linux |
≥ 9.0.0, < 9.0.321→ 9.0.321 |
9.0.321 |
| Microsoft.NET 9.0 installed on Mac OS |
≥ 9.0.0, < 9.0.321→ 9.0.321 |
9.0.321 |
| Microsoft.NET 9.0 installed on Windows |
≥ 9.0.0, < 9.0.321→ 9.0.321 |
9.0.321 |
| MicrosoftMicrosoft Visual Studio 2022 version 17.14 |
≥ 17.14.0, < 17.14.45→ 17.14.45 |
17.14.45 |
| MicrosoftMicrosoft Visual Studio 2026 version 18.11 |
≥ 18.11.0, < 18.11.4→ 18.11.4 |
18.11.4 |
| MicrosoftMicrosoft Visual Studio 2026 version 18.12 |
< 18.12.0→ 18.12.0 |
18.12.0 |
| MicrosoftMicrosoft.TestPlatform.CLI |
≥ 17.2.0, < 18.11.1→ 18.11.1 |
18.11.1 |
| NuGetMicrosoft.TestPlatform.CLI |
All versions→ Not listed |
Not listed |
Original description The description as published by the source.
Duplicate Advisory
This advisory has been withdrawn because it is a duplicate of GHSA-6856-87hx-p5x7. This link is maintained to preserve external references.
Original Description
Improper access control in .NET allows an authorized attacker to elevate privileges locally.
Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory
References
- web msrc.microsoft.com
- web nvd.nist.gov
- web github.com
- REDHAT Red Hat